{"action":"Upgrade undertow to 2.0.30-1 or later.","affected":[{"fixed":"2.0.30-1","introduced":"0"}],"component":"undertow","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.0.30-1"],"id":"tcs_01M5NEQT0KF5NN4KHXWX5XA2N2","modified_at":"2026-10-26T12:02:28.335725742Z","published_at":"2020-04-28T15:15:13.037Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-1745","https://security-tracker.debian.org/tracker/CVE-2020-1745"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-1745","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-1745"}],"summary":"A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote,"}