JSP Source Code Leakage

2017-02-2003:42:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.4%

JSON

undertow is vulnerable to JSP source code leakage. This is because the source code of a JSP is downloaded/displayed when a trailing slash is added to a JSP URL.

CPENameOperatorVersion
undertow corele1.2.4.Final

CPE	Name	Operator	Version
	undertow core	le	1.2.4.Final

References

issues.jboss.org/browse/WFLY-4595

0.003 Low

EPSS

Percentile

68.4%

JSON

Related for VERACODE:3593