CVE-2020-1757

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-04-21 · updated 2026-06-17
Weakness: CWE-20

Description

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an application mapping resulting in the security bypass.

Affected products

RedHat Jboss Data Grid: 7.0.0
Red Hat JBoss EAP: 7.0.0
RedHat Jboss Fuse: 6.0.0, 7.0.0
RedHat Openshift Application Runtimes: all versions
Red Hat Single Sign-On: 7.0
Red Hat undertow: before 2.1.0; 2.0.0-sp1, 2.0.25-sp1, 2.0.26-sp3, 2.0.28-sp1, 2.0.28-sp2 — fixed in 2.1.0

How to fix

Upgrade to a fixed version: Red Hat undertow 2.1.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-1757 or the next vulnerability affects your stack