{"action":"Upgrade io.undertow:undertow-core to 1.4.24.Final (1.x) or 2.0.2.FInal (2.x) or later.","affected":[{"fixed":"2.0.2.FInal","introduced":"2.0.0.Alpha1"},{"fixed":"1.4.24.Final","introduced":"0"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2017-12196"],"ecosystem":"Maven","epss":0.02011,"exploited":false,"fixed_versions":["2.0.2.FInal","1.4.24.Final"],"ghsa_id":"GHSA-cp7v-vmv7-6x2q","id":"tcs_01M5N8SWGTAEWCAC5Z3NQRF1MX","modified_at":"2023-11-08T03:58:52.028351Z","published_at":"2022-05-13T01:38:10Z","references":["https://osv.dev/vulnerability/GHSA-cp7v-vmv7-6x2q","https://nvd.nist.gov/vuln/detail/CVE-2017-12196","https://github.com/undertow-io/undertow/commit/facb33a5cedaf4b7b96d3840a08210370a806870","https://access.redhat.com/errata/RHSA-2018:0478","https://access.redhat.com/errata/RHSA-2018:0479","https://access.redhat.com/errata/RHSA-2018:0480","https://access.redhat.com/errata/RHSA-2018:0481","https://access.redhat.com/errata/RHSA-2018:1525","https://access.redhat.com/errata/RHSA-2018:2405","https://access.redhat.com/errata/RHSA-2018:3768","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12196","https://github.com/undertow-io/undertow","https://issues.jboss.org/browse/UNDERTOW-1190"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-cp7v-vmv7-6x2q","url":"https://osv.dev/vulnerability/GHSA-cp7v-vmv7-6x2q"}],"summary":"Incorrect Authorization in Undertow"}