Aller au contenu
en Se connecter
Non notée

CVE-2020-27782 A flaw was found in the Undertow AJP connector

Description

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1, 2.0.33.SP2, and 2.2.3.SP1.

Produits et versions touchés

Produit Versions touchées Corrigé en
Undertow 2.2.3.SP1 Pas de correctif indiqué
Undertow 2.1.5.SP1 Pas de correctif indiqué
Undertow 2.0.33.SP2 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Undertow

Les 14 CVE de Undertow →
CVE-2022-4492 The undertow client is not checking the server identity presented by the server certificate in https connections Non notée CVE-2022-2764 A flaw was found in Undertow Non notée CVE-2022-1259 A flaw was found in Undertow Non notée CVE-2022-1319 A flaw was found in Undertow Non notée
Suivre cette CVE