PT-2018-9900 · Red Hat · Undertow +1

Name of the Vulnerable Software and Affected Versions: Jboss EAP version 7.1.0.GA Description: The AJP connector in undertow does not use the ALLOW ENCODED SLASH option, allowing slash and anti-slash characters to be encoded in the URL. This could lead to path traversal, resulting in the disclosu...