Files
CVEs-PoC/2019/CVE-2019-3888.md
T
2025-09-29 21:09:30 +02:00

779 B

CVE-2019-3888

Description

A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)

POC

Reference

Github

No PoCs found on GitHub currently.