Skip to content
Fencer Vulns
medium 5.3

CVE-2024-1459 json

Undertow: directory traversal vulnerability

published 2024-02-12 2 y ago modified 2026-11-05 4 d ago also GHSA-v76w-3ph8-vm66 , EUVD-2024-0728

cvss
5.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.7%
EPSS 1.7% chance of exploitation in 30 days, percentile 77%
public exploits
0
none known

Summary

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.

Patch / fix

  • maven io.undertow:undertow-core 2.2.31.Final, 2.3.12.Final
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 0:1.0.17-1.Final_redhat_00001.1.el8eap, 0:1.1.2-1.redhat_00001.1.el8eap, 0:1.3.9-3.SP3_redhat_00001.1.el8eap, 0:1.9.4-1.Final_redhat_00001.1.el8eap, 0:1.10.0-35.Final_redhat_00034.1.el8eap, 0:1.15.22-1.Final_redhat_00001.1.el8eap, 0:2.0.1-3.Final_redhat_00001.1.el8eap, 0:2.2.30-1.SP1_redhat_00001.1.el8eap, 0:2.16.0-18.redhat_00052.1.el8eap, 0:3.3.21-1.Final_redhat_00001.1.el8eap, 0:3.4.10-2.redhat_00001.1.el8eap, 0:3.8.12-1.SP2_redhat_00001.1.el8eap, 0:5.0.27-4.SP2_redhat_00001.1.el8eap, 0:5.3.36-1.Final_redhat_00001.1.el8eap, 0:5.5.5-6.redhat_2.1.el8eap, 0:5.13.3.202401111512-1.r_redhat_00001.1.el8eap, 0:7.4.16-4.GA_redhat_00002.1.el8eap, 0:11.0.18-2.Final_redhat_00001.1.el8eap
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 0:1.0.17-1.Final_redhat_00001.1.el9eap, 0:1.1.2-1.redhat_00001.1.el9eap, 0:1.3.9-3.SP3_redhat_00001.1.el9eap, 0:1.9.4-1.Final_redhat_00001.1.el9eap, 0:1.10.0-35.Final_redhat_00034.1.el9eap, 0:1.15.22-1.Final_redhat_00001.1.el9eap, 0:2.0.1-3.Final_redhat_00001.1.el9eap, 0:2.2.30-1.SP1_redhat_00001.1.el9eap, 0:2.16.0-18.redhat_00052.1.el9eap, 0:3.3.21-1.Final_redhat_00001.1.el9eap, 0:3.4.10-2.redhat_00001.1.el9eap, 0:3.8.12-1.SP2_redhat_00001.1.el9eap, 0:5.0.27-4.SP2_redhat_00001.1.el9eap, 0:5.3.36-1.Final_redhat_00001.1.el9eap, 0:5.5.5-6.redhat_2.1.el9eap, 0:5.13.3.202401111512-1.r_redhat_00001.1.el9eap, 0:7.4.16-4.GA_redhat_00002.1.el9eap, 0:11.0.18-2.Final_redhat_00001.1.el9eap
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 0:1.0.17-1.Final_redhat_00001.1.el7eap, 0:1.1.2-1.redhat_00001.1.el7eap, 0:1.3.9-3.SP3_redhat_00001.1.el7eap, 0:1.9.4-1.Final_redhat_00001.1.el7eap, 0:1.10.0-35.Final_redhat_00034.1.el7eap, 0:1.15.22-1.Final_redhat_00001.1.el7eap, 0:2.0.1-3.Final_redhat_00001.1.el7eap, 0:2.2.30-1.SP1_redhat_00001.1.el7eap, 0:2.16.0-18.redhat_00052.1.el7eap, 0:3.3.21-1.Final_redhat_00001.1.el7eap, 0:3.4.10-2.redhat_00001.1.el7eap, 0:3.8.12-1.SP2_redhat_00001.1.el7eap, 0:5.0.27-4.SP2_redhat_00001.1.el7eap, 0:5.3.36-1.Final_redhat_00001.1.el7eap, 0:5.5.5-6.redhat_2.1.el7eap, 0:5.13.3.202401111512-1.r_redhat_00001.1.el7eap, 0:7.4.16-4.GA_redhat_00002.1.el7eap, 0:11.0.18-2.Final_redhat_00001.1.el7eap
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 0:2.3.11-1.SP1_redhat_00001.1.el8eap
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 0:2.3.11-1.SP1_redhat_00001.1.el9eap
  • undertow Debian 14 2.3.18-1

debian advisories DEBIAN-CVE-2024-1459

  • eap7-jberet jboss enterprise application platform 7.4 1.3.9-3.SP3_redhat_00001.1.el7eap
  • eap7-wildfly jboss enterprise application platform 7.4 7.4.16-4.GA_redhat_00002.1.el7eap
  • eap7-undertow jboss enterprise application platform 7.4 2.2.30-1.SP1_redhat_00001.1.el7eap
  • eap7-hibernate jboss enterprise application platform 7.4 5.3.36-1.Final_redhat_00001.1.el7eap
  • eap7-apache-cxf jboss enterprise application platform 7.4 3.4.10-2.redhat_00001.1.el7eap
  • eap7-infinispan jboss enterprise application platform 7.4 11.0.18-2.Final_redhat_00001.1.el7eap
  • eap7-elytron-web jboss enterprise application platform 7.4 1.9.4-1.Final_redhat_00001.1.el7eap
  • eap7-hal-console jboss enterprise application platform 7.4 3.3.21-1.Final_redhat_00001.1.el7eap

red hat advisories RHSA-2024:1674RHSA-2024:1675RHSA-2024:1676RHSA-2024:2764

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-1459 updated cvss 5.3

undertow: directory traversal vulnerability

  • Red Hat Data Grid 8 undertow undertow
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Decision Manager 7 undertow undertow Red Hat Fuse 7 undertow undertow Red Hat JBoss Data Grid 7 undertow undertow Red Hat JBoss Fuse 6 undertow undertow Red Hat Process Automation 7 undertow undertow Red Hat Single Sign-On 7 undertow undertow
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-lucene-core 5.5.5-6.redhat_2.1.el7eap, eap7-lucene-misc 5.5.5-6.redhat_2.1.el7eap, eap7-lucene-solr 5.5.5-6.redhat_2.1.el7eap, eap7-lucene-facet 5.5.5-6.redhat_2.1.el7eap, eap7-jberet 1.3.9-3.SP3_redhat_00001.1.el7eap, eap7-lucene-queries 5.5.5-6.redhat_2.1.el7eap, +60 more
    fixed: vendor fix RHSA-2024:1674
  • Red Hat JBoss EAP 7.4 for RHEL 8 eap7-lucene-core 5.5.5-6.redhat_2.1.el8eap, eap7-lucene-misc 5.5.5-6.redhat_2.1.el8eap, eap7-lucene-solr 5.5.5-6.redhat_2.1.el8eap, eap7-lucene-facet 5.5.5-6.redhat_2.1.el8eap, eap7-jberet 1.3.9-3.SP3_redhat_00001.1.el8eap, eap7-lucene-queries 5.5.5-6.redhat_2.1.el8eap, +62 more
    fixed: vendor fix RHSA-2024:1675
  • Red Hat JBoss EAP 7.4 for RHEL 9 eap7-lucene-core 5.5.5-6.redhat_2.1.el9eap, eap7-lucene-misc 5.5.5-6.redhat_2.1.el9eap, eap7-lucene-solr 5.5.5-6.redhat_2.1.el9eap, eap7-lucene-facet 5.5.5-6.redhat_2.1.el9eap, eap7-jberet 1.3.9-3.SP3_redhat_00001.1.el9eap, eap7-lucene-queries 5.5.5-6.redhat_2.1.el9eap, +59 more
    fixed: vendor fix RHSA-2024:1676
  • Red Hat JBoss EAP 8.0 for RHEL 8 eap8-undertow 2.3.11-1.SP1_redhat_00001.1.el8eap Red Hat JBoss EAP 8.0 for RHEL 9 eap8-undertow 2.3.11-1.SP1_redhat_00001.1.el9eap
    fixed: vendor fix RHSA-2024:2764
  • Red Hat JBoss Enterprise Application Platform 8
    fixed: vendor fix RHSA-2024:2763
  • Red Hat build of Quarkus quarkus-undertow
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

1.71% chance of exploitation in the next 30 days, higher than 77% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
GitHub 3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected packages

ecosystem package affected fixed in
maven io.undertow:undertow-core
<2.2.31.Final
>=2.3.0.Alpha1, <2.3.12.Final
2.2.31.Final
2.3.12.Final

Affected products

  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
  • Red Hat Red Hat JBoss Enterprise Application Platform 8
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
  • Red Hat Red Hat build of Quarkus
  • Red Hat Red Hat Data Grid 8
  • Red Hat Red Hat Decision Manager 7
  • Red Hat Red Hat Fuse 7
  • Red Hat Red Hat JBoss Data Grid 7
  • Red Hat Red Hat JBoss Fuse 6
  • Red Hat Red Hat Process Automation 7
  • Red Hat Red Hat Single Sign-On 7

Classification

Weakness
  • CWE-24 Path Traversal: '../filedir'

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.