Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-1757
HistoryApr 21, 2020 - 5:15 p.m.

Security feature bypass

2020-04-2117:15:00
PRIOn knowledge base
www.prio-n.com
3

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.7%

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an application mapping resulting in the security bypass.

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.7%