io.undertow:undertow-core vulnerabilities (Maven)
42 vulnerabilities.
io.undertow:undertow-coreMavenUndertow: undertow: request smuggling via malformed http request headers8.7 Highio.undertow:undertow-coreMavenUndertow: undertow: request smuggling via `\r\r\r` as a header block terminator8.7 Highio.undertow:undertow-coreMavenUndertow: undertow: request smuggling via inconsistent header parsing8.7 Highio.undertow:undertow-coreMavenUndertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET Requests5.9 Mediumio.undertow:undertow-coreMavenUndertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks7.5 Highio.undertow:undertow-coreMavenUndertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf9.6 Criticalio.undertow:undertow-coreMavenUndertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded7.5 Highio.undertow:undertow-coreMavenUndertow: undertow madeyoureset http/2 ddos vulnerability7.5 Highio.undertow:undertow-coreMavenUndertow: cookie smuggling/spoofing7.4 Highio.undertow:undertow-coreMavenUndertow: unrestricted request storage leads to memory exhaustion7.5 Highio.undertow:undertow-coreMavenUndertow: improper state management in proxy protocol parsing causes information leakage7.5 Highio.undertow:undertow-coreMavenUndertow: learningpushhandler can lead to remote memory dos attacks5.3 Mediumio.undertow:undertow-coreMavenUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticket7.5 Highio.undertow:undertow-coreMavenUndertow: url-encoded request path information can be broken on ajp-listener7.5 Highio.undertow:undertow-coreMavenUndertow: out-of-memory error after several closed connections with wildfly-http-client protocol7.5 Highio.undertow:undertow-coreMavenUndertow: directory traversal vulnerability5.3 Mediumio.undertow:undertow-coreMavenUndertow: infinite loop in sslconduit during close7.5 Highio.undertow:undertow-coreMavenUndertow client not checking server identity presented by server certificate in https connections7.5 Highio.undertow:undertow-coreMavenUndertow vulnerable to Dos via Large AJP request7.5 Highio.undertow:undertow-coreMavenUndertow vulnerable to Denial of Service (DoS) attacks7.5 Highio.undertow:undertow-coreMavenUndertow vulnerable to memory exhaustion due to buffer leak7.5 Highio.undertow:undertow-coreMavenundertow Race Condition vulnerability5.9 Mediumio.undertow:undertow-coreMavenUndertow Uncontrolled Resource Consumption5.9 Mediumio.undertow:undertow-coreMavenDenial of service in Undertow7.5 Highio.undertow:undertow-coreMavenHTTP request smuggling in Undertow4.8 Mediumio.undertow:undertow-coreMavenHTTP Request Smuggling in Undertow4.8 Mediumio.undertow:undertow-coreMavenAllocation of Resources Without Limits or Throttling in Undertow7.5 Highio.undertow:undertow-coreMavenHTTP Request Smuggling in Undertow6.5 Mediumio.undertow:undertow-coreMavenImproper Authorization in Undertoe8.6 Highio.undertow:undertow-coreMavenImproper Input Validation in Undertow8.1 Highio.undertow:undertow-coreMavenUndertow vulnerable to Uncontrolled Resource Consumption7.5 Highio.undertow:undertow-coreMavenPotential to access user credentials from the log files when debug logging enabled4.8 Mediumio.undertow:undertow-coreMavenCredential exposure through log files in Undertow5.3 Mediumio.undertow:undertow-coreMavenExposure of Sensitive Information to an Unauthorized Actor in Undertow5.3 Mediumio.undertow:undertow-coreMavenUncontrolled Resource Consumption in Undertow6.5 Mediumio.undertow:undertow-coreMavenUndertow Request Smuggling vulnerability2.6 Lowio.undertow:undertow-coreMavenIncorrect Authorization in Undertow4.8 Mediumio.undertow:undertow-coreMavenUndertow vulnerable to Request Smuggling6.1 Mediumio.undertow:undertow-coreMavenModerate severity vulnerability that affects io.undertow:undertow-core7.5 Highio.undertow:undertow-coreMavenUndertow-core vulnerable to HTTP Request Smuggling6.5 Mediumio.undertow:undertow-coreMavenUndertow Uncaught Exception vulnerability5.9 Mediumio.undertow:undertow-coreMavenImproper Limitation of a Pathname to a Restricted Directory in JBoss Undertow5.0 Medium