| Package | Affected versions | Patched versions |
|---|---|---|
| io.undertow:undertow-core | < 2.2.15 | 2.2.15 |
| jboss enterprise application platform | = 7.3= 7.4 | |
| single sign-on | = 7.4.10= 7.5.1 | |
| undertow | < 2.2.15 | 2.2.15 |
Undertow client side invocation timeout raised when calling over HTTP2, this vulnerability can allow attacker to carry out denial of service (DoS) attacks in versions less than 2.2.15 Final.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free