io.undertow:undertow-core vulnerabilities (TuxCare)
18 vulnerabilities.
io.undertow:undertow-coreTuxCareUndertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET Requests5.9 Mediumio.undertow:undertow-coreTuxCareUndertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks7.5 Highio.undertow:undertow-coreTuxCareUndertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf9.6 Criticalio.undertow:undertow-coreTuxCareUndertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded7.5 Highio.undertow:undertow-coreTuxCareUndertow: undertow madeyoureset http/2 ddos vulnerability7.5 Highio.undertow:undertow-coreTuxCareUndertow: cookie smuggling/spoofing7.4 Highio.undertow:undertow-coreTuxCareUndertow: unrestricted request storage leads to memory exhaustion7.5 Highio.undertow:undertow-coreTuxCareUndertow: improper state management in proxy protocol parsing causes information leakage7.5 Highio.undertow:undertow-coreTuxCareUndertow: learningpushhandler can lead to remote memory dos attacks5.3 Mediumio.undertow:undertow-coreTuxCareUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticket7.5 Highio.undertow:undertow-coreTuxCareUndertow: url-encoded request path information can be broken on ajp-listener7.5 Highio.undertow:undertow-coreTuxCareUndertow: out-of-memory error after several closed connections with wildfly-http-client protocol7.5 Highio.undertow:undertow-coreTuxCareUndertow: directory traversal vulnerability5.3 Mediumio.undertow:undertow-coreTuxCareUndertow: infinite loop in sslconduit during close7.5 Highio.undertow:undertow-coreTuxCareUndertow client not checking server identity presented by server certificate in https connections7.5 Highio.undertow:undertow-coreTuxCarePotential to access user credentials from the log files when debug logging enabled4.8 Mediumio.undertow:undertow-coreTuxCareUndertow Missing Authorization when requesting a protected directory without trailing slash5.3 Mediumio.undertow:undertow-coreTuxCareCredential exposure through log files in Undertow5.3 Medium