GHSA-vjxc-frw4-jmh5
Undertow vulnerable to Uncontrolled Resource Consumption
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | io.undertow:undertow-core | < 2.0.29.Final | 2.0.29.Final |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability was found in the Undertow HTTP server in versions before 2.0.29 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.
References
External links from the advisory. They lead to third-party sites.