{"action":"Upgrade io.undertow:undertow-servlet to 2.0.23 or later.","affected":[{"fixed":"2.0.23","introduced":"0"}],"component":"io.undertow:undertow-servlet","cve_ids":["CVE-2019-10184"],"ecosystem":"Maven","epss":0.03478,"exploited":false,"fixed_versions":["2.0.23"],"ghsa_id":"GHSA-w69w-jvc7-wjgv","id":"tcs_01M5N9FQ7YDKWBMQ2H0JR1RVP6","modified_at":"2024-02-21T05:41:33.734706Z","published_at":"2019-08-01T19:18:16Z","references":["https://osv.dev/vulnerability/GHSA-w69w-jvc7-wjgv","https://nvd.nist.gov/vuln/detail/CVE-2019-10184","https://github.com/undertow-io/undertow/pull/794","https://github.com/undertow-io/undertow/commit/5fa7ac68c0e4251c93056d9982db5e794e04ebfa","https://access.redhat.com/errata/RHSA-2019:2935","https://access.redhat.com/errata/RHSA-2019:2936","https://access.redhat.com/errata/RHSA-2019:2937","https://access.redhat.com/errata/RHSA-2019:2938","https://access.redhat.com/errata/RHSA-2019:2998","https://access.redhat.com/errata/RHSA-2019:3044","https://access.redhat.com/errata/RHSA-2019:3045","https://access.redhat.com/errata/RHSA-2019:3046","https://access.redhat.com/errata/RHSA-2019:3050","https://access.redhat.com/errata/RHSA-2020:0727","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10184","https://issues.redhat.com/browse/UNDERTOW-1578","https://security.netapp.com/advisory/ntap-20220210-0016"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-w69w-jvc7-wjgv","url":"https://osv.dev/vulnerability/GHSA-w69w-jvc7-wjgv"}],"summary":"Undertow Missing Authorization when requesting a protected directory without trailing slash"}