{"action":"Upgrade io.undertow:undertow-core to 2.2.31.Final (2.2.x) or 2.3.12.Final (2.3.x) or later.","affected":[{"fixed":"2.2.31.Final","introduced":"0"},{"fixed":"2.3.12.Final","introduced":"2.3.0.Alpha1"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2024-1459"],"ecosystem":"Maven","epss":0.01714,"exploited":false,"fixed_versions":["2.2.31.Final","2.3.12.Final"],"ghsa_id":"GHSA-v76w-3ph8-vm66","id":"tcs_01M5N9DHD7H18JZNXFSG9Q71HA","modified_at":"2024-11-22T12:50:47.252592Z","published_at":"2024-02-12T21:30:55Z","references":["https://osv.dev/vulnerability/GHSA-v76w-3ph8-vm66","https://nvd.nist.gov/vuln/detail/CVE-2024-1459","https://github.com/undertow-io/undertow/pull/1556","https://github.com/undertow-io/undertow/commit/40bb3314f013247af8e222870bd5045ca8650c5c","https://github.com/undertow-io/undertow/commit/54f3e4325425c472f5af5fc973e02df83d7a711a","https://access.redhat.com/errata/RHSA-2024:1674","https://access.redhat.com/errata/RHSA-2024:1675","https://access.redhat.com/errata/RHSA-2024:1676","https://access.redhat.com/errata/RHSA-2024:1677","https://access.redhat.com/errata/RHSA-2024:2763","https://access.redhat.com/errata/RHSA-2024:2764","https://access.redhat.com/security/cve/CVE-2024-1459","https://bugzilla.redhat.com/show_bug.cgi?id=2259475","https://issues.redhat.com/browse/UNDERTOW-2339","https://security.netapp.com/advisory/ntap-20241122-0008"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-v76w-3ph8-vm66","url":"https://osv.dev/vulnerability/GHSA-v76w-3ph8-vm66"}],"summary":"Undertow Path Traversal vulnerability"}