CVE-2024-7885高 7.5A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. T…
CVE-2023-44487高 7.5悪用確認済み（CISA KEV）The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as…
CVE-2022-4492高 7.5The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step …
CVE-2022-2764中 4.9A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.
CVE-2022-2053高 7.5When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit im…