{"action":"Upgrade io.undertow:undertow-core to 1.0.17 (1.0.x), 1.1.0.CR5 (1.1.x) or 1.2.0.Beta3 (1.2.x) or later.","affected":[{"fixed":"1.0.17","introduced":"1.0.0"},{"fixed":"1.1.0.CR5","introduced":"1.1.0.Beta1"},{"fixed":"1.2.0.Beta3","introduced":"1.2.0.Beta1"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2014-7816"],"ecosystem":"Maven","epss":0.25082,"exploited":false,"fixed_versions":["1.0.17","1.1.0.CR5","1.2.0.Beta3"],"ghsa_id":"GHSA-h6p6-fc4w-cqhx","id":"tcs_01M5N8ZWB8MVJBRKPG91ZCQ05Z","modified_at":"2024-12-07T05:40:06.129651Z","published_at":"2022-05-17T04:15:16Z","references":["https://osv.dev/vulnerability/GHSA-h6p6-fc4w-cqhx","https://nvd.nist.gov/vuln/detail/CVE-2014-7816","https://bugzilla.redhat.com/show_bug.cgi?id=1157478","https://issues.jboss.org/browse/UNDERTOW-338","https://issues.jboss.org/browse/WFLY-4020","http://seclists.org/oss-sec/2014/q4/830","http://www.securityfocus.com/bid/71328"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-h6p6-fc4w-cqhx","url":"https://osv.dev/vulnerability/GHSA-h6p6-fc4w-cqhx"}],"summary":"Improper Limitation of a Pathname to a Restricted Directory in JBoss Undertow"}