Directory Traversal

Jboss EAP is vulnerable to directory traversal vulnerability. The AJP connector in undertow does not use the ALLOWENCODEDSLASH option and thus allow the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the information disclosure of arbitrary local...