Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20900
HistoryJul 26, 2019 - 7:06 a.m.

Information Disclosure

2019-07-2607:06:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.003 Low

EPSS

Percentile

71.0%

undertow-servlet is vulnerable to information disclosure. A remote attacker is able to discover directory structures using requests without trailing slashes via the API.