Search for packages
| purl | pkg:maven/io.undertow/undertow-core@2.0.2 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-db55-1gpe-aaah
Aliases: CVE-2017-12196 GHSA-cp7v-vmv7-6x2q |
Incorrect Authorization When using `Digest` authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server. |
Affected by 34 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-09-17T22:37:08.891474+00:00 | GitLab Importer | Affected by | VCID-db55-1gpe-aaah | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2017-12196.yml | 34.0.1 |
| 2024-01-03T18:00:08.860904+00:00 | GitLab Importer | Affected by | VCID-db55-1gpe-aaah | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2017-12196.yml | 34.0.0rc1 |