CVE-2019-10184
libundertow-java: undertow before version 2.0.23.Final is vulnerable to an information leak issue
CVE-2019-10184 is fixed in libundertow-java on 1 platform by libundertow-java 2.0.23-1 (version 2.0.23-1), released July 25, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0348
89th percentile
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libundertow-java · Ubuntu 20.04 LTS (focal) | 2.0.23-1 | libundertow-java 2.0.23-1 | Jul 25, 2019 |