Description
The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a JSP page via a "/" at the end of a URL.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.wildfly:wildfly-parent | >= 8.1.0.Final, < 9.0.0.CR2 | 9.0.0.CR2 | GHSA-4vwv-x3gp-2j4g |