Search for packages
| purl | pkg:maven/io.undertow/undertow-core@2.0.29 |
| Tags | Ghost |
| Next non-vulnerable version | 2.3.20.Final |
| Latest non-vulnerable version | 2.4.0.Beta1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-dvxb-wu3m-xuaz
Aliases: CVE-2020-1745 GHSA-gv2w-88hx-8m9r |
Improper Authorization in Undertoe A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution. |
Affected by 0 other vulnerabilities. Affected by 20 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-04T14:32:33.708981+00:00 | GHSA Importer | Affected by | VCID-dvxb-wu3m-xuaz | https://github.com/advisories/GHSA-gv2w-88hx-8m9r | 38.1.0 |
| 2026-04-02T12:36:39.121150+00:00 | GitLab Importer | Affected by | VCID-dvxb-wu3m-xuaz | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2020-1745.yml | 38.0.0 |