Skip to content
OpenAdvisories

Product · Red Hat

undertow

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2020-1757

    Improper Input Validation in Undertow

    A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path afte…

    Red Hat undertow undertow undertow Debian Ubuntu Maven
  • High 7.5
    CVE-2019-14888

    Undertow vulnerable to Uncontrolled Resource Consumption

    A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.

    Red Hat undertow undertow undertow Debian Ubuntu Maven