Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-1459

Опубликовано: 12 фев. 2024
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:undertow:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.06044
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-24

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 2 года назад

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.

CVSS3: 5.3
redhat
около 2 лет назад

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.

CVSS3: 5.3
debian
почти 2 года назад

A path traversal vulnerability was found in Undertow. This issue may a ...

CVSS3: 5.3
github
почти 2 года назад

Undertow Path Traversal vulnerability

EPSS

Процентиль: 91%
0.06044
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-24