Miggo Logo
Miggo Vulnerability Database
→
CVE-2019-10184

CVE-2019-10184: Undertow Missing Authorization when requesting a protected directory without trailing slash

7.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2019-10184
GHSA ID
GHSA-w69w-jvc7-wjgv
EPSS Score
0.76926%
CWE
CWE-862
Published
8/1/2019
Updated
9/25/2023
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
io.undertow:undertow-servletmaven< 2.0.232.0.23

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

un**rtow ***or* v*rsion *.*.**.*in*l is vuln*r**l* to *n in*orm*tion l**k issu*. W** *pps m*y **v* t**ir *ir**tory stru*tur*s pr**i*t** t*rou** r*qu*sts wit*out tr*ilin* sl*s**s vi* t** *pi.

Reasoning

No *n*lysis *v*il**l*