Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-65H2-WF7M-Q2V8
HistorySep 27, 2023 - 3:30 p.m.

Undertow vulnerable to denial of service

2023-09-2715:30:35
CWE-400
CWE-789
GitHub Advisory Database
github.com
12
undertow
denial of service
servlets
outofmemoryerror
filesizethreshold
remote attack

0.021 Low

EPSS

Percentile

89.1%

JSON

A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it’s possible to bypass the limit by setting the file name in the request to null.

Related

debiancve 1
ubuntucve 1
osv 2
redhatcve 1
cvelist 1
prion 1
cve 1
veracode 1
redhat 10
nessus 6
oracle 1
debiancve
debiancve
CVE-2023-3223
2023-09-27 15:18:56
ubuntucve
ubuntucve
CVE-2023-3223
2023-09-27 00:00:00
osv
osv
Undertow vulnerable to denial of service
2023-09-27 15:30:35
CVE-2023-3223
2023-09-27 15:18:56
redhatcve
redhatcve
CVE-2023-3223
2023-08-07 14:48:58
cvelist
cvelist
CVE-2023-3223 Undertow: outofmemoryerror due to @multipartconfig handling
2023-09-27 13:54:44
prion
prion
Design/Logic Flaw
2023-09-27 15:18:00
cve
cve
CVE-2023-3223
2023-09-27 15:18:56
veracode
veracode
Denial Of Service (DOS)
2023-10-04 06:21:37
redhat
redhat
(RHSA-2023:4507) Important: Red Hat JBoss Enterprise Application Platform security update
2023-08-07 14:59:21
(RHSA-2023:4920) Important: Red Hat Single Sign-On 7.6.5 security update on RHEL 9
2023-08-31 13:21:43
(RHSA-2023:4505) Important: Red Hat JBoss Enterprise Application Platform security update
2023-08-07 14:59:13
nessus
nessus
RHEL 8 : Red Hat Single Sign-On 7.6.5 security update on RHEL 8 (Important) (RHSA-2023:4919)
2023-08-31 00:00:00
RHEL 7 : Red Hat JBoss Enterprise Application Platform (RHSA-2023:4505)
2023-08-07 00:00:00
RHEL 9 : Red Hat Single Sign-On 7.6.5 security update on RHEL 9 (Important) (RHSA-2023:4920)
2023-08-31 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

0.021 Low

EPSS

Percentile

89.1%

JSON
Related for GHSA-65H2-WF7M-Q2V8
debiancve1ubuntucve1osv2redhatcve1cvelist1prion1cve1veracode1redhat10nessus6oracle1