CVE-2020-1745

A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability to read web application files from a vulnerable server. In instances where the vulnerable server allows file uploads, an attacker could upload malicious JavaServer Pages (JSP) code within a variety of file types and trigger this vulnerability to gain remote code execution.

• CWE-285

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1745Issue Tracking, Third Party Advisory
• https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/Not Applicable
• https://security.netapp.com/advisory/ntap-20240216-0011/
• https://www.cnvd.org.cn/webinfo/show/5415Not Applicable
• https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487Not Applicable
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1745Issue Tracking, Third Party Advisory
• https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/Not Applicable
• https://security.netapp.com/advisory/ntap-20240216-0011/
• https://www.cnvd.org.cn/webinfo/show/5415Not Applicable
• https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487Not Applicable

Published

Apr 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17444An issue was discovered in picoTCP 1.7.0. The routine for pr…7.5
• CVE-2020-17445An issue was discovered in picoTCP 1.7.0. The code for proce…7.5
• CVE-2020-17446asyncpg before 0.21.0 allows a malicious PostgreSQL server t…9.8
• CVE-2020-17447Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-17448Telegram Desktop through 2.1.13 allows a spoofed file type t…7.8
• CVE-2020-17449PHP-Fusion 9.03 allows XSS via the error_log file.5.4
• CVE-2020-17450PHP-Fusion 9.03 allows XSS on the preview page.6.1
• CVE-2020-17451flatCore before 1.5.7 allows XSS by an admin via the acp/acp…4.8
• CVE-2020-17452flatCore before 1.5.7 allows upload and execution of a .php …7.2
• CVE-2020-17453WSO2 Management Console through 5.10 allows XSS via the carb…6.1
• CVE-2020-17454WSO2 API Manager 3.1.0 and earlier has reflected XSS on the …6.1
• CVE-2020-17456SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code…9.8