CVE-2024-1459
Published: 12 February 2024
Summary
CVE-2024-1459 is a medium-severity Path Traversal: '../filedir' (CWE-24) vulnerability in Redhat Undertow. Its CVSS base score is 5.3 (Medium).
Operationally, ranked in the top 6.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
A path traversal vulnerability tracked as CVE-2024-1459 was identified in Undertow and affects applications deployed on JBoss EAP. The flaw, assigned CWE-24 and rated 5.3 under CVSS 3.1, permits an unauthenticated remote attacker to append a crafted sequence to an HTTP request and thereby reach privileged or restricted files and directories.
An attacker with network access can exploit the issue without authentication or user interaction by sending a specially crafted HTTP request to a vulnerable Undertow-based application running on JBoss EAP, resulting in unauthorized read access to sensitive resources on the server.
Red Hat has published multiple security advisories (RHSA-2024:1674, RHSA-2024:1675, RHSA-2024:1676, RHSA-2024:2763, and RHSA-2024:2764) that address the vulnerability through updated packages. The associated EPSS score has remained flat at 0.1010 with no material increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-0728
Vulnerability details
A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files…
more
and directories.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.