Lucene search
HistoryJun 20, 2024 - 3:15 p.m.
CVE-2024-6162
undertow
vulnerability
request path
denial of service
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.1%
A vulnerability was found in Undertow. URL-encoded request path information can be broken for concurrent requests on ajp-listener, causing the wrong path to be processed and resulting in a possible denial of service.
Related
github
github
osv
osv
ubuntucve
ubuntucve
CVE-2024-6162
2024-06-20 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-06-21 06:40:09
redhatcve
redhatcve
CVE-2024-6162
2024-06-20 14:27:57
cvelist
cvelist
debiancve
debiancve
CVE-2024-6162
2024-06-20 15:15:50
vulnrichment
vulnrichment
cve
cve
CVE-2024-6162
2024-06-20 15:15:50
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-6162