CVE-2024-7885ÉLEVÉE 7.5A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. T…
CVE-2023-44487ÉLEVÉE 7.5EXPLOITED (CISA KEV)The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as…
CVE-2022-4492ÉLEVÉE 7.5The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step …
CVE-2022-2764MOYENNE 4.9A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.
CVE-2022-2053ÉLEVÉE 7.5When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit im…