{"action":"Upgrade io.undertow:undertow-core to 2.0.30 or later.","affected":[{"fixed":"2.0.30","introduced":"0"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2020-1745"],"ecosystem":"Maven","epss":0.04957,"exploited":false,"fixed_versions":["2.0.30"],"ghsa_id":"GHSA-gv2w-88hx-8m9r","id":"tcs_01M5N8YYMFRG6F78WE65C4JJAN","modified_at":"2024-02-21T05:27:15.402515Z","published_at":"2022-05-24T17:16:46Z","references":["https://osv.dev/vulnerability/GHSA-gv2w-88hx-8m9r","https://nvd.nist.gov/vuln/detail/CVE-2020-1745","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1745","https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert","https://www.cnvd.org.cn/webinfo/show/5415","https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-gv2w-88hx-8m9r","url":"https://osv.dev/vulnerability/GHSA-gv2w-88hx-8m9r"}],"summary":"Improper Authorization in Undertoe"}