Skip to content
OpenAdvisories

Package · Ubuntu

undertow

60 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2017-2666 Public exploit

    Undertow-core vulnerable to HTTP Request Smuggling

    It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data int…

    [UNKNOWN] undertow undertow undertow Debian Ubuntu Maven
  • Medium 5.5
    CVE-2018-1047 Public exploit

    Improper Input Validation in org.wildfly:wildfly-undertow

    A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

    Red Hat wildfly undertow org.wildfly:wildfly-undertow Ubuntu Maven