CVE-2020-1757 in Undertowinformación

Resumen

por MITRE

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an application mapping resulting in the security bypass.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Red Hat, Inc.

Reservar

2019-11-27

Moderación

aceptado

Artículo

VDB-154168

CPE

listo

EPSS

0.01584

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-1757
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-1757
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-1757/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!