Security
فارسی
All products

Red Hat Single Sign-On 7/undertow

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undertow's url-encoded request path information can be broken on ajp-listenerCVE-2024-6162 · GHSA-9442-GM4V-R222 io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat High Fix reported
Undertow vulnerable to Race ConditionCVE-2024-7885 · GHSA-9623-MQMM-5RCF io.undertow:undertow-coreRed Hat Build of Keycloak/undertow MavenRed Hat High Fix reported
Undertow Path Traversal vulnerabilityCVE-2024-1459 · GHSA-V76W-3PH8-VM66 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat Medium Fix reported
Undertow Missing Release of Memory after Effective Lifetime vulnerabilityCVE-2024-3653 · GHSA-CH7Q-GPFF-H9HP io.undertow:undertow-coreOpenShift Serverless/undertow MavenRed Hat Medium Fix reported
Undertow vulnerable to Uncontrolled Resource ConsumptionCVE-2019-14888 · GHSA-VJXC-FRW4-JMH5 io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat High Fix reported
Improper Authorization in UndertoeCVE-2020-1745 · GHSA-GV2W-88HX-8M9R io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat High Fix reported
Potential to access user credentials from the log files when debug logging enabledCVE-2019-10212 · GHSA-8VH8-VC28-M2HF io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat Critical Fix reported
Uncontrolled Resource Consumption in UndertowCVE-2018-1114 · GHSA-GJJX-GQM4-WCGM io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat Medium Fix reported
undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629)CVE-2022-1259 Red Hat Integration Camel K 1/undertowRed Hat Integration Service Registry/undertow Red Hat Medium No fix reported
undertow: AJP Request closes connection exceeding maxRequestSizeCVE-2023-5379 Red Hat Decision Manager 7/undertowRed Hat Fuse 7/undertow Red Hat Medium No fix reported