CVE-2019-10184

—

CVSS 3.1

7.5 high

EPSS

3%p88

Published

Jul 25, 2019 (Jul 25, 2019)

Modified

Jun 17, 2026

Description

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.

Vendors: redhat netapp
Products: undertow, jboss data grid, jboss enterprise application platform, openshift application runtimes, single sign-on, active iq unified manager
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news0 stories

No ingested article mentions this CVE yet.