Skip to content
fr Sign in
Not rated

CVE-2020-27782 A flaw was found in the Undertow AJP connector

Description

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1, 2.0.33.SP2, and 2.2.3.SP1.

Affected products and versions

Product Affected versions Fixed in
Undertow 2.2.3.SP1 No fix stated
Undertow 2.1.5.SP1 No fix stated
Undertow 2.0.33.SP2 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Undertow

The 14 CVEs of Undertow →
CVE-2022-4492 The undertow client is not checking the server identity presented by the server certificate in https connections Not rated CVE-2022-2764 A flaw was found in Undertow Not rated CVE-2022-1259 A flaw was found in Undertow Not rated CVE-2022-1319 A flaw was found in Undertow Not rated
Track this CVE