The Undertow module of WildFly allows source code disclosure

2022-05-1702:19:49

Google

osv.dev

0.003 Low

EPSS

Percentile

68.3%

JSON

The Undertow module of WildFly versions 8.1.0.Final, 8.2.0.Final, 9.0.0.CR1 allows remote attackers to obtain the source code of a JSP page via a “/” at the end of a URL.

CPENameOperatorVersion
org.wildfly:wildfly-parenteq8.1.0.Final
org.wildfly:wildfly-parenteq8.2.1.Final
org.wildfly:wildfly-parenteq9.0.0.Alpha1
org.wildfly:wildfly-parenteq9.0.0.CR1
org.wildfly:wildfly-parenteq9.0.0.Beta2
org.wildfly:wildfly-parenteq8.2.0.Final
org.wildfly:wildfly-parenteq9.0.0.Beta1

Name	Operator	Version
org.wildfly:wildfly-parent	eq	8.1.0.Final
org.wildfly:wildfly-parent	eq	8.2.1.Final
org.wildfly:wildfly-parent	eq	9.0.0.Alpha1
org.wildfly:wildfly-parent	eq	9.0.0.CR1
org.wildfly:wildfly-parent	eq	9.0.0.Beta2
org.wildfly:wildfly-parent	eq	8.2.0.Final
org.wildfly:wildfly-parent	eq	9.0.0.Beta1