Search for packages
| purl | pkg:maven/io.undertow/undertow-core@2.0.42 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-u1af-z4an-aaab
Aliases: CVE-2020-1757 GHSA-2w73-fqqj-c92p |
Improper Input Validation A flaw was found in undertow, where the Servlet container causes `servletPath` to normalize incorrectly by truncating the path after semicolon which may lead to an application mapping resulting in the security bypass. |
Affected by 5 other vulnerabilities. Affected by 25 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T20:04:40.170660+00:00 | GHSA Importer | Affected by | VCID-u1af-z4an-aaab | None | 36.0.0 |
| 2024-09-17T22:04:37.259199+00:00 | GHSA Importer | Affected by | VCID-u1af-z4an-aaab | https://github.com/advisories/GHSA-2w73-fqqj-c92p | 34.0.1 |
| 2024-01-03T17:39:26.818120+00:00 | GHSA Importer | Affected by | VCID-u1af-z4an-aaab | https://github.com/advisories/GHSA-2w73-fqqj-c92p | 34.0.0rc1 |