René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"CX: CVE-2019-3888 in Maven-io.undertow:undertow-core and 2.0.9.Final @ JavaVulnerableLab.refs/heads/master","articleBody":"**Description**\r\n\r\nA vulnerability was found in Undertow web server up to 1.0.0.Alpha19, between 1.3.0.Beta9 to 1.3.0.Beta13, 1.3.0.CR.x, between 1.3.0.Final to 1.4.27.Final and 2.0.x before 2.0.20.Final. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)\r\n\r\n**HIGH Vulnerable Package** issue exists @ **io.undertow:undertow-core** in branch **refs/heads/master**\r\n\r\n**Vulnerability ID:** CVE-2019-3888\r\n\r\n**Package Name:** io.undertow:undertow-core\r\n\r\n**Severity:** HIGH\r\n\r\n**CVSS Score:** 9.8\r\n\r\n**Publish Date:** 2019-06-12T14:29:00\r\n\r\n**Current Package Version:** 2.0.9.Final\r\n\r\n**Remediation Upgrade Recommendation:** 2.0.35.Final\r\n\r\n[Link To SCA](https://sca.scacheckmarx.com/#/projects/43c66723-1c23-4989-9e51-bfa32766271e/reports/e3c3068d-3289-466b-aa0f-b9c2cf00b4ea/vulnerabilities/CVE-2019-3888%3AMaven-io.undertow%3Aundertow-core-2.0.9.Final/vulnerabilityDetails/vulnerabilities/CVE-2019-3888%3AMaven-io.undertow%3Aundertow-core-2.0.9.Final/vulnerabilityDetails)\r\n\r\n[Reference – NVD link](https://nvd.nist.gov/vuln/detail/CVE-2019-3888)\r\n\r\n","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2021-08-11T16:45:39.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":25},"url":"https://github.com/35/JavaVulnerableLab/issues/35"}