{"id":"CVE-2023-3223","aliases":["DEBIAN-CVE-2023-3223","EUVD-2023-2441","GHSA-65h2-wf7m-q2v8","RHSA-2023:4505","RHSA-2023:4506","RHSA-2023:4507","RHSA-2023:4918","RHSA-2023:4919","RHSA-2023:4920","RHSA-2025:4226","RHSA-2025:9583","UBUNTU-CVE-2023-3223"],"status":"published","title":"Undertow: outofmemoryerror due to @multipartconfig handling","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.02659,"percentile":0.85817,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-789"],"published":"2023-09-27T13:54:44Z","modified":"2026-10-28T02:30:35Z","fixes":[{"ecosystem":"Maven","package":"io.undertow:undertow-parent","fixed_in":["2.2.24.Final"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:14","package":"undertow","fixed_in":["2.3.18-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"io.undertow:undertow-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.24.Final"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.18-1"}]}],"versions":["1.3.11-1","1.3.16-1","1.3.19-1","1.3.21-1","1.3.23-1","1.3.4-1","1.3.5-1","1.3.7-1","1.4.0-1","1.4.1-1","1.4.18-1","1.4.20-1","1.4.21-1","1.4.21-2","1.4.22-1","1.4.23-1","1.4.23-2","1.4.23-3","1.4.25-1","1.4.25-2","1.4.3-1","1.4.4-1","1.4.6-1","1.4.7-1","1.4.8-1","2.0.23-1","2.0.25-1","2.0.26-1","2.0.27-1","2.0.28-1","2.0.29-1","2.0.30-1","2.1.0-1","2.1.1-1","2.1.3-1","2.2.0-1","2.2.10-1","2.2.12-1","2.2.13-1","2.2.14-1","2.2.16-1","2.2.17-1","2.2.18-1","2.2.19-1","2.2.2-1","2.2.20-1","2.2.21-1","2.2.3-1","2.2.4-1","2.2.5-1","2.2.8-1","2.3.8-1","2.3.8-2"]},{"source":"osv","ecosystem":"Maven","package":"io.undertow:undertow-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.24.Final"}]}],"versions":["1.0.0.Alpha1","1.0.0.Alpha10","1.0.0.Alpha11","1.0.0.Alpha12","1.0.0.Alpha13","1.0.0.Alpha14","1.0.0.Alpha15","1.0.0.Alpha16","1.0.0.Alpha17","1.0.0.Alpha18","1.0.0.Alpha19","1.0.0.Alpha2","1.0.0.Alpha20","1.0.0.Alpha21","1.0.0.Alpha22","1.0.0.Alpha3","1.0.0.Alpha4","1.0.0.Alpha5","1.0.0.Alpha6","1.0.0.Alpha7","1.0.0.Alpha8","1.0.0.Alpha9","1.0.0.Beta1","1.0.0.Beta10","1.0.0.Beta11","1.0.0.Beta12","1.0.0.Beta13","1.0.0.Beta14","1.0.0.Beta15","1.0.0.Beta16","1.0.0.Beta17","1.0.0.Beta18","1.0.0.Beta19","1.0.0.Beta2","1.0.0.Beta20","1.0.0.Beta21","1.0.0.Beta22","1.0.0.Beta23","1.0.0.Beta24","1.0.0.Beta25","1.0.0.Beta26","1.0.0.Beta27","1.0.0.Beta28","1.0.0.Beta29","1.0.0.Beta3","1.0.0.Beta30","1.0.0.Beta31","1.0.0.Beta32","1.0.0.Beta33","1.0.0.Beta4","1.0.0.Beta5","1.0.0.Beta6","1.0.0.Beta7","1.0.0.Beta8","1.0.0.Beta9","1.0.0.CR1","1.0.0.CR2","1.0.0.CR3","1.0.0.CR4","1.0.0.CR5","1.0.0.Final","1.0.1.Final","1.0.10.Final","1.0.11.Final","1.0.12.Final","1.0.13.Final","1.0.14.Final","1.0.15.Final","1.0.16.Final","1.0.17.Final","1.0.18.Final","1.0.19.Final","1.0.2.Final","1.0.3.Final","1.0.4.Final","1.0.5.Final","1.0.6.Final","1.0.7.Final","1.0.8.Final","1.0.9.Final","1.1.0.Beta1","1.1.0.Beta2","1.1.0.Beta3","1.1.0.Beta4","1.1.0.Beta5","1.1.0.Beta6","1.1.0.Beta7","1.1.0.Beta8","1.1.0.CR1","1.1.0.CR2","1.1.0.CR3","1.1.0.CR4","1.1.0.CR5","1.1.0.CR6","1.1.0.CR7","1.1.0.CR8","1.1.0.Final","1.1.1.Final","1.1.2.Final","1.1.3.Final","1.1.4.Final","1.1.5.Final","1.1.6.Final","1.1.7.Final","1.1.8.Final","1.1.9.Final","1.2.0.Beta1","1.2.0.Beta10","1.2.0.Beta2","1.2.0.Beta3","1.2.0.Beta4","1.2.0.Beta5","1.2.0.Beta6","1.2.0.Beta7","1.2.0.Beta8","1.2.0.Beta9","1.2.0.CR1","1.2.0.Final","1.2.1.Final","1.2.10.Final","1.2.11.Final","1.2.12.Final","1.2.2.Final","1.2.3.Final","1.2.4.Final","1.2.5.Final","1.2.6.Final","1.2.7.Final","1.2.8.Final","1.2.9.Final","1.3.0.Beta1","1.3.0.Beta10","1.3.0.Beta11","1.3.0.Beta12","1.3.0.Beta13","1.3.0.Beta2","1.3.0.Beta3","1.3.0.Beta4","1.3.0.Beta5","1.3.0.Beta6","1.3.0.Beta7","1.3.0.Beta8","1.3.0.Beta9","1.3.0.CR1","1.3.0.CR2","1.3.0.CR3","1.3.0.Final","1.3.1.Final","1.3.10.Final","1.3.11.Final","1.3.12.Final","1.3.13.Final","1.3.14.Final","1.3.15.Final","1.3.16.Final","1.3.17.Final","1.3.18.Final","1.3.19.Final","1.3.2.Final","1.3.20.Final","1.3.21.Final","1.3.22.Final","1.3.23.Final","1.3.24.Final","1.3.25.Final","1.3.26.Final","1.3.27.Final","1.3.28.Final","1.3.29.Final","1.3.3.Final","1.3.30.Final","1.3.31.Final","1.3.32.Final","1.3.33.Final","1.3.4.Final","1.3.5.Final","1.3.6.Final","1.3.7.Final","1.3.8.Final","1.3.9.Final","1.4.0.Beta1","1.4.0.CR1","1.4.0.CR2","1.4.0.CR3","1.4.0.CR4","1.4.0.Final","1.4.1.Final","1.4.10.Final","1.4.11.Final","1.4.12.Final","1.4.13.Final","1.4.14.Final","1.4.15.Final","1.4.16.Final","1.4.17.Final","1.4.18.Final","1.4.19.Final","1.4.2.Final","1.4.20.Final","1.4.21.Final","1.4.22.Final","1.4.23.Final","1.4.24.Final","1.4.25.Final","1.4.26.Final","1.4.27.Final","1.4.28.Final","1.4.3.Final","1.4.4.Final","1.4.5.Final","1.4.6.Final","1.4.7.Final","1.4.8.Final","1.4.9.Final","2.0.0.Alpha1","2.0.0.Beta1","2.0.0.Final","2.0.1.Final","2.0.10.Final","2.0.11.Final","2.0.12.Final","2.0.13.Final","2.0.14.Final","2.0.15.Final","2.0.16.Final","2.0.17.Final","2.0.18.Final","2.0.19.Final","2.0.2.Final","2.0.20.Final","2.0.21.Final","2.0.22.Final","2.0.23.Final","2.0.24.Final","2.0.25.Final","2.0.26.Final","2.0.27.Final","2.0.28.Final","2.0.29.Final","2.0.3.Final","2.0.30.Final","2.0.31.Final","2.0.32.Final","2.0.33.Final","2.0.34.Final","2.0.35.Final","2.0.36.Final","2.0.37.Final","2.0.38.Final","2.0.39.Final","2.0.4.Final","2.0.40.Final","2.0.41.Final","2.0.42.Final","2.0.5.Final","2.0.6.Final","2.0.7.Final","2.0.8.Final","2.0.9.Final","2.1.0.Final","2.1.1.Final","2.1.2.Final","2.1.3.Final","2.1.4.Final","2.1.5.Final","2.1.6.Final","2.1.7.Final","2.1.8.Final","2.2.0.Final","2.2.1.Final","2.2.10.Final","2.2.11.Final","2.2.12.Final","2.2.13.Final","2.2.14.Final","2.2.15.Final","2.2.16.Final","2.2.17.Final","2.2.18.Final","2.2.19.Final","2.2.2.Final","2.2.20.Final","2.2.21.Final","2.2.22.Final","2.2.23.Final","2.2.3.Final","2.2.4.Final","2.2.5.Final","2.2.6.Final","2.2.7.Final","2.2.8.Final","2.2.9.Final"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jettison","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.redhat_00002.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.25-3.SP3_redhat_00001.1.el7eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jettison","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.redhat_00002.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.25-3.SP3_redhat_00001.1.el8eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el9eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el9eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el9eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el9eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el9eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.12-3.GA_redhat_00003.1.el9eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jettison","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-1.redhat_00002.1.el9eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.25-3.SP3_redhat_00001.1.el9eap"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.9-1.redhat_00001.1.el7sso"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.9-1.redhat_00001.1.el7sso"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.9-1.redhat_00001.1.el8sso"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.9-1.redhat_00001.1.el8sso"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.9-1.redhat_00001.1.el9sso"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.9-1.redhat_00001.1.el9sso"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-artemis-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-artemis-native-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.5.5.016-1.redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.11-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14.2-1.redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.18-14.SP13_redhat_00001.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.10-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.10-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-woodstox-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.3-2.redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.10-2.redhat_00002.1.ep7.el7"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-5.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-2.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-2.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-5.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-5.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-2.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.63-5.Final_redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.63-5.Final_redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.41-4.SP5_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.4-1","1.3.5-1","1.3.7-1","1.3.11-1","1.3.16-1","1.3.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.20-1","1.4.21-1","1.4.22-1","1.4.23-1","1.4.23-2build1","1.4.23-3","1.4.23-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.23-1","2.0.27-1","2.0.28-1","2.0.29-1","2.0.29-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.8-1","2.2.12-1","2.2.13-1","2.2.14-1","2.2.16-1","2.2.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-2","2.3.8-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.18-1","2.3.18-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.20-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.18-2","2.3.20-1","2.3.20-1ubuntu1"]}],"products":[{"vendor":"red hat","product":"red hat build of quarkus"},{"vendor":"red hat","product":"red hat data grid 8"},{"vendor":"red hat","product":"red hat decision manager 7"},{"vendor":"red hat","product":"red hat fuse 7.12.1"},{"vendor":"red hat","product":"red hat integration camel k"},{"vendor":"red hat","product":"red hat integration service registry"},{"vendor":"red hat","product":"red hat jboss data grid 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.1.0"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 for rhel 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 for rhel 9"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7.4 on rhel 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform expansion pack"},{"vendor":"red hat","product":"red hat jboss fuse 6"},{"vendor":"red hat","product":"red hat openstack platform 13 (queens) operational tools"},{"vendor":"red hat","product":"red hat process automation 7"},{"vendor":"red hat","product":"red hat single sign-on 7.6 for rhel 7"},{"vendor":"red hat","product":"red hat single sign-on 7.6 for rhel 8"},{"vendor":"red hat","product":"red hat single sign-on 7.6 for rhel 9"},{"vendor":"red hat","product":"red hat single sign-on 7.6.5"},{"vendor":"red hat","product":"red hat support for spring boot"},{"vendor":"red hat","product":"rhel-8 based middleware containers"},{"vendor":"redhat","product":"jboss_enterprise_application_platform"},{"vendor":"redhat","product":"jboss_enterprise_application_platform_text-only_advisories"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"redhat","product":"openshift_container_platform_for_ibm_linuxone"},{"vendor":"redhat","product":"openshift_container_platform_for_power"},{"vendor":"redhat","product":"single_sign-on"},{"vendor":"redhat","product":"undertow"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2023:4505","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4506","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4507","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4509","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4918","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4919","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4920","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4921","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:4924","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7247","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3223","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Vendor Advisory","advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209689","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Vendor Advisory","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0004/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3223","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0004","tags":["web"]},{"url":"https://github.com/advisories/GHSA-65h2-wf7m-q2v8"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3223.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-3223","tags":["advisory"]},{"url":"https://github.com/undertow-io/undertow","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185707","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-24711","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24720","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24744","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24745","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24790","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24808","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24819","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24820","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24821","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24822","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24831","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24832","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24835","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24836","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24858","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24973","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25004","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25085","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25086","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25204","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-25205","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4505.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46877","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1436","tags":["advisory"]},{"url":"https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3223","tags":["advisory","report"]},{"url":"https://issues.redhat.com/browse/JBEAP-24721","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4506.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-24722","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4507.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4918.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4919.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4920.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4226","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264928","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-29286","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4226.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3690","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3859","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3859","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37714","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37714","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37714","tags":["advisory"]},{"url":"https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-40690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-40690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40690","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0084","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0084","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1319","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23913","tags":["advisory"]},{"url":"https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24785","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25647","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25647","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40149","tags":["advisory"]},{"url":"https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40152","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3f7h-mf4q-vrm4","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1108","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1108","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m4mm-pg93-fv78","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1973","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1973","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1635","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9583","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262918","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-29448","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9583.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36518","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36518","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-57j2-w4cx-62h2","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37136","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37137","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1259","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4492","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5379","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1233","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1233","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1233","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v4mm-q8fv-r2w5","tags":["advisory"]},{"url":"https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523","tags":["article"]},{"url":"https://issues.redhat.com/browse/WFLY-19226","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2023-3223","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-3223","title":"Undertow: outofmemoryerror due to @multipartconfig handling","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","status":"published","published":"2023-09-27T13:54:44.682Z","modified":"2024-08-02T06:48:07.955Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-2441","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","status":"published","published":"2023-09-27T13:54:44Z","modified":"2024-08-02T06:48:07Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:13.650706Z"}],"ghsa":[{"id":"GHSA-65h2-wf7m-q2v8","title":"Undertow vulnerable to denial of service","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","status":"published","published":"2023-09-27T15:30:35Z","modified":"2024-05-03T20:27:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-789"],"updated_at":"2026-11-02T14:37:48.08826Z"}],"nvd":[{"id":"CVE-2023-3223","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","status":"published","published":"2023-09-27T15:18:56.457Z","modified":"2026-06-17T06:13:36.98Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T14:08:31.699785Z"}],"osv":[{"id":"CVE-2023-3223","title":"Undertow: outofmemoryerror due to @multipartconfig handling","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","status":"published","published":"2023-09-27T13:54:44.682Z","modified":"2026-10-28T02:30:35.607503776Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T15:44:31.790231Z"},{"id":"DEBIAN-CVE-2023-3223","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","status":"published","published":"2023-09-27T15:18:56.457Z","modified":"2026-10-26T18:02:25.788175653Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"GHSA-65h2-wf7m-q2v8","title":"Undertow vulnerable to denial of service","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","status":"published","published":"2023-09-27T15:30:35Z","modified":"2024-05-03T20:50:09.127172Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-789"],"updated_at":"2026-11-02T15:46:39.266402Z"},{"id":"RHSA-2023:4505","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update","status":"published","published":"2024-09-30T03:54:40Z","modified":"2026-08-07T10:09:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4506","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update","status":"published","published":"2024-09-30T03:54:51Z","modified":"2026-08-07T10:09:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4507","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update","status":"published","published":"2024-09-30T03:55:09Z","modified":"2026-08-07T10:09:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4918","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.5 security update on RHEL 7","status":"published","published":"2024-09-30T03:55:18Z","modified":"2026-08-07T10:09:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4919","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.5 security update on RHEL 8","status":"published","published":"2024-09-30T03:54:24Z","modified":"2026-08-07T10:09:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:4920","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.5 security update on RHEL 9","status":"published","published":"2024-09-30T03:54:33Z","modified":"2026-08-07T10:09:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2025:4226","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 security update","status":"published","published":"2025-04-28T10:03:38Z","modified":"2026-10-14T10:10:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:9583","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.14 Security update","status":"published","published":"2025-06-25T10:06:36Z","modified":"2026-10-14T10:11:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"UBUNTU-CVE-2023-3223","description":"A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.","status":"published","published":"2023-09-27T15:18:00Z","modified":"2026-10-17T12:57:18.873668609Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"}]}}