CVE-2020-1745

CVE-2020-1745 describes a critical file inclusion vulnerability in the AJP connector of Red Hat Undertow versions 2.0.29.Final and earlier. This flaw allows a remote, unauthenticated attacker to read arbitrary web application files from a vulnerable server. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise. If the server permits file uploads, an attacker could upload malicious JSP code and achieve remote code execution. While no public exploit code (Metasploit, Nuclei, ExploitDB) is currently available and there is minimal community discussion or media coverage, its high severity warrants immediate patching.