undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through reques...

References

• advisory https://access.redhat.com/errata/RHSA-2019:2935
• advisory https://access.redhat.com/errata/RHSA-2019:2936
• advisory https://access.redhat.com/errata/RHSA-2019:2937
• advisory https://access.redhat.com/errata/RHSA-2019:2938
• advisory https://access.redhat.com/errata/RHSA-2019:2998
• advisory https://access.redhat.com/errata/RHSA-2019:3044
• advisory https://access.redhat.com/errata/RHSA-2019:3045
• advisory https://access.redhat.com/errata/RHSA-2019:3046
• advisory https://access.redhat.com/errata/RHSA-2019:3050
• advisory https://access.redhat.com/errata/RHSA-2020:0727
• advisory https://security.netapp.com/advisory/ntap-20220210-0016/
• patch https://github.com/undertow-io/undertow/pull/794
• report https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10184