CVE-2024-1459
- Source
- https://cve.org/CVERecord?id=CVE-2024-1459
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-1459.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-1459
- Aliases
- Downstream
DEBIAN (1)
UBUNTU (1)
- Published
- 2024-02-12T20:30:03Z
- Modified
- 2026-10-20T02:45:12Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- Undertow: directory traversal vulnerability
- Details
-
A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.
- Database specific
{ "cna_assigner": "redhat", "cwe_ids": [ "CWE-24" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1459.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "fixed": "0:2.16.0-18.redhat_00052.1.el8eap" }, { "fixed": "0:3.4.10-2.redhat_00001.1.el8eap" }, { "fixed": "0:5.13.3.202401111512-1.r_redhat_00001.1.el8eap" }, { "fixed": "0:1.9.4-1.Final_redhat_00001.1.el8eap" }, { "fixed": "0:3.3.21-1.Final_redhat_00001.1.el8eap" }, { "fixed": "0:5.3.36-1.Final_redhat_00001.1.el8eap" }, { "fixed": "0:11.0.18-2.Final_redhat_00001.1.el8eap" }, { "fixed": "0:1.1.2-1.redhat_00001.1.el8eap" }, { "fixed": "0:1.3.9-3.SP3_redhat_00001.1.el8eap" }, { "fixed": "0:2.0.1-3.Final_redhat_00001.1.el8eap" }, { "fixed": "0:1.1.2-1.redhat_00001.1.el8eap" }, { "fixed": "0:5.0.27-4.SP2_redhat_00001.1.el8eap" }, { "fixed": "0:1.10.0-35.Final_redhat_00034.1.el8eap" }, { "fixed": "0:3.8.12-1.SP2_redhat_00001.1.el8eap" }, { "fixed": "0:1.0.17-1.Final_redhat_00001.1.el8eap" }, { "fixed": "0:5.5.5-6.redhat_2.1.el8eap" }, { "fixed": "0:2.2.30-1.SP1_redhat_00001.1.el8eap" }, { "fixed": "0:7.4.16-4.GA_redhat_00002.1.el8eap" }, { "fixed": "0:1.15.22-1.Final_redhat_00001.1.el8eap" }, { "fixed": "0:2.16.0-18.redhat_00052.1.el9eap" }, { "fixed": "0:3.4.10-2.redhat_00001.1.el9eap" }, { "fixed": "0:5.13.3.202401111512-1.r_redhat_00001.1.el9eap" }, { "fixed": "0:1.9.4-1.Final_redhat_00001.1.el9eap" }, { "fixed": "0:3.3.21-1.Final_redhat_00001.1.el9eap" }, { "fixed": "0:5.3.36-1.Final_redhat_00001.1.el9eap" }, { "fixed": "0:11.0.18-2.Final_redhat_00001.1.el9eap" }, { "fixed": "0:1.1.2-1.redhat_00001.1.el9eap" }, { "fixed": "0:1.3.9-3.SP3_redhat_00001.1.el9eap" }, { "fixed": "0:2.0.1-3.Final_redhat_00001.1.el9eap" }, { "fixed": "0:1.1.2-1.redhat_00001.1.el9eap" }, { "fixed": "0:5.0.27-4.SP2_redhat_00001.1.el9eap" }, { "fixed": "0:1.10.0-35.Final_redhat_00034.1.el9eap" }, { "fixed": "0:3.8.12-1.SP2_redhat_00001.1.el9eap" }, { "fixed": "0:1.0.17-1.Final_redhat_00001.1.el9eap" }, { "fixed": "0:5.5.5-6.redhat_2.1.el9eap" }, { "fixed": "0:2.2.30-1.SP1_redhat_00001.1.el9eap" }, { "fixed": "0:7.4.16-4.GA_redhat_00002.1.el9eap" }, { "fixed": "0:1.15.22-1.Final_redhat_00001.1.el9eap" }, { "fixed": "0:2.16.0-18.redhat_00052.1.el7eap" }, { "fixed": "0:3.4.10-2.redhat_00001.1.el7eap" }, { "fixed": "0:5.13.3.202401111512-1.r_redhat_00001.1.el7eap" }, { "fixed": "0:1.9.4-1.Final_redhat_00001.1.el7eap" }, { "fixed": "0:3.3.21-1.Final_redhat_00001.1.el7eap" }, { "fixed": "0:5.3.36-1.Final_redhat_00001.1.el7eap" }, { "fixed": "0:11.0.18-2.Final_redhat_00001.1.el7eap" }, { "fixed": "0:1.1.2-1.redhat_00001.1.el7eap" }, { "fixed": "0:1.3.9-3.SP3_redhat_00001.1.el7eap" }, { "fixed": "0:2.0.1-3.Final_redhat_00001.1.el7eap" }, { "fixed": "0:1.1.2-1.redhat_00001.1.el7eap" }, { "fixed": "0:5.0.27-4.SP2_redhat_00001.1.el7eap" }, { "fixed": "0:1.10.0-35.Final_redhat_00034.1.el7eap" }, { "fixed": "0:3.8.12-1.SP2_redhat_00001.1.el7eap" }, { "fixed": "0:1.0.17-1.Final_redhat_00001.1.el7eap" }, { "fixed": "0:5.5.5-6.redhat_2.1.el7eap" }, { "fixed": "0:2.2.30-1.SP1_redhat_00001.1.el7eap" }, { "fixed": "0:7.4.16-4.GA_redhat_00002.1.el7eap" }, { "fixed": "0:1.15.22-1.Final_redhat_00001.1.el7eap" }, { "fixed": "0:2.3.11-1.SP1_redhat_00001.1.el8eap" }, { "fixed": "0:2.3.11-1.SP1_redhat_00001.1.el9eap" } ], "source": "AFFECTED_FIELD", "strategy": "InverseAffectedRanges" } ] } ] }- References
-
- https://access.redhat.com/downloads/content/package-browser/
- https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
- https://access.redhat.com/errata/RHSA-2024:1674
- https://access.redhat.com/errata/RHSA-2024:1675
- https://access.redhat.com/errata/RHSA-2024:1676
- https://access.redhat.com/errata/RHSA-2024:1677
- https://access.redhat.com/errata/RHSA-2024:2763
- https://access.redhat.com/errata/RHSA-2024:2764
- https://access.redhat.com/security/cve/CVE-2024-1459
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1459.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-1459
- https://security.netapp.com/advisory/ntap-20241122-0008/
- https://bugzilla.redhat.com/show_bug.cgi?id=2259475
- https://github.com/undertow-io/undertow
Affected packages
Git / github.com/undertow-io/undertow
Affected ranges
- Type
- GIT
- Repo
- https://github.com/undertow-io/undertow
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "fixed": "2.3.12" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" } ] }
Affected versions
1.*
1.0.0.Alpha1
1.0.0.Alpha10
1.0.0.Alpha11
1.0.0.Alpha12
1.0.0.Alpha13
1.0.0.Alpha14
1.0.0.Alpha15
1.0.0.Alpha16
1.0.0.Alpha17
1.0.0.Alpha18
1.0.0.Alpha19
1.0.0.Alpha2
1.0.0.Alpha20
1.0.0.Alpha21
1.0.0.Alpha22
1.0.0.Alpha3
1.0.0.Alpha4
1.0.0.Alpha5
1.0.0.Alpha6
1.0.0.Alpha7
1.0.0.Alpha8
1.0.0.Alpha9
1.0.0.Beta1
1.0.0.Beta10
1.0.0.Beta11
1.0.0.Beta12
1.0.0.Beta13
1.0.0.Beta14
1.0.0.Beta15
1.0.0.Beta16
1.0.0.Beta17
1.0.0.Beta18
1.0.0.Beta19
1.0.0.Beta2
1.0.0.Beta20
1.0.0.Beta21
1.0.0.Beta22
1.0.0.Beta23
1.0.0.Beta24
1.0.0.Beta25
1.0.0.Beta26
1.0.0.Beta27
1.0.0.Beta28
1.0.0.Beta29
1.0.0.Beta3
1.0.0.Beta30
1.0.0.Beta31
1.0.0.Beta32
1.0.0.Beta33
1.0.0.Beta4
1.0.0.Beta5
1.0.0.Beta6
1.0.0.Beta7
1.0.0.Beta8
1.0.0.Beta9
1.0.0.CR1
1.0.0.CR2
1.0.0.CR3
1.0.0.CR4
1.0.0.Final
1.0.1.Final
1.0.2.Final
1.0.3.Final
1.1.0.Beta1
1.1.0.Beta2
1.1.0.Beta3
1.1.0.Beta4
1.1.0.Beta5
1.1.0.Beta6
1.1.0.Beta7
1.1.0.Beta8
1.2.0.Beta1
1.2.0.Beta10
1.2.0.Beta2
1.2.0.Beta3
1.2.0.Beta4
1.2.0.Beta5
1.2.0.Beta6
1.2.0.Beta7
1.2.0.Beta8
1.2.0.Beta9
1.2.0.CR1
1.2.0.Final
1.2.1.Final
1.2.2.Final
1.2.3.Final
1.2.4.Final
1.3.0.Beta1
1.3.0.Beta10
1.3.0.Beta11
1.3.0.Beta12
1.3.0.Beta13
1.3.0.Beta2
1.3.0.Beta3
1.3.0.Beta4
1.3.0.Beta5
1.3.0.Beta6
1.3.0.Beta7
1.3.0.Beta8
1.3.0.Beta9
1.3.0.CR1
1.3.0.CR2
1.3.0.CR3
1.3.0.Final
1.3.1.Final
1.3.2.Final
1.3.3.Final
2.*
2.0.0.Alpha1
2.0.0.Beta1
2.0.0.Final
2.0.1.Final
2.0.10.Final
2.0.11.Final
2.0.12.Final
2.0.13.Final
2.0.14.Final
2.0.15.Final
2.0.16.Final
2.0.17.Final
2.0.2.Final
2.0.20.Final
2.0.21.Final
2.0.22.Final
2.0.23.Final
2.0.24.Final
2.0.25.Final
2.0.26.Final
2.0.27.Final
2.0.28.Final
2.0.29.Final
2.0.3.Final
2.0.4.Final
2.0.5.Final
2.0.6.Final
2.0.7.Final
2.0.8.Final
2.0.9.Final
2.1.0.Final
2.1.1.Final
2.1.2.Final
2.1.3.Final
2.1.4.Final
2.2.0.Final
2.2.1.Final
2.2.10.Final
2.2.11.Final
2.2.12.Final
2.2.13.Final
2.2.14.Final
2.2.15.Final
2.2.16.Final
2.2.17.Final
2.2.2.Final
2.2.3.Final
2.2.4.Final
2.2.5.Final
2.2.6.Final
2.2.7.Final
2.2.8.Final
2.2.9.Final
2.3.0.Alpha1
2.3.0.Alpha2
2.3.0.Beta1
2.3.0.Final
2.3.1.Final
2.3.10.Final
2.3.11.Final
2.3.2.Final
2.3.3.Final
2.3.4.Final
2.3.5.Final
2.3.6.Final
2.3.7.Final
2.3.8.Final
2.3.9.Final