CVE-2014-7816
1 advisory.
Maven/io.undertow:undertow-core CVE-2014-7816: medium, EPSS 25.08%
Improper Limitation of a Pathname to a Restricted Directory in JBoss Undertow
Action: Upgrade io.undertow:undertow-core to 1.0.17 (1.0.x), 1.1.0.CR5 (1.1.x) or 1.2.0.Beta3 (1.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.17 | - |
| 1.1.0.Beta1 | 1.1.0.CR5 | - |
| 1.2.0.Beta1 | 1.2.0.Beta3 | - |
Fixed versions
| 1.0.17 | 1.1.0.CR5 | 1.2.0.Beta3 |
Sources
- osv: GHSA-h6p6-fc4w-cqhx
- https://nvd.nist.gov/vuln/detail/CVE-2014-7816
- https://bugzilla.redhat.com/show_bug.cgi?id=1157478
- https://issues.jboss.org/browse/UNDERTOW-338
- https://issues.jboss.org/browse/WFLY-4020
- http://seclists.org/oss-sec/2014/q4/830
- http://www.securityfocus.com/bid/71328
CVE-2014-7816 · published · modified · JSON