CVE-2026-49365

CVE-2026-49365 — раскрытие stack trace через muteException в camel-netty-http / camel-undertow Рабочие proof-of-concept воспроизведения одной и той же уязвимости Apache Camel, по одному на каждый рантайм: Рантайм| Каталог| Стек| Показанные компоненты ---|---|---|--- Camel Spring Boot|...

CVE-2025-9784

CVE-2025-9784 MadeYouReset Тест уязвимости HTTP/2 Обзор Этот репозиторий содержит простой и эффективный bash-скрипт для проверки уязвимости CVE-2025-9784 известной как атака типа «Отказ в обслуживании» DoS HTTP/2 «MadeYouReset» в реализациях HTTP/2 сервера Undertow. Уязвимость позволяет...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF 우회 CVE-2026-21876 도커 컨테이너 + 최소 PoC. @airween과 @fzipi님께 각각 빠른 응대에 감사드립니다! 취약점 수정이 매우 짧은 시간 안에 준비되었습니다. PoC 실행: cd springbootundertowstand or aspnetstand docker compose up --build python3 demo/send.py BASELINE - 403, BYPASS - 200 + reconstructed payload 참고 자료 Github 보안 ...

CVE-2025-12543-Fix-for-Wildfly

WildFly 11.0.0.Final Базовый образ — исправление CVE-2025-12543 Обзор Этот репозиторий предоставляет базовый Docker-образ, построенный на WildFly 11.0.0.Final с бэкпортированным исправлением для CVE-2025-12543 — критической уязвимости проверки заголовка Host в Undertow. Образ предназначен для...

CVE-2026-78329

CVE-2026-78329 — стратегия фильтрации заголовков camel-undertow не применяется инъекция websocket. Готовый к запуску репроducer proof-of-concept для уязвимости Apache Camel, в которой UndertowEndpoint по умолчанию использовал базовую HttpHeaderFilterStrategy в качестве своей headerFilterStrategy ...

CVE-2026-56139

camel-undertow Rest DSL muteException Stack-Trace Disclosure Reproducer CVE-2026-56139 Этот проект демонстрирует проблему раскрытия информации в потребителе camel-undertow Rest DSL Apache Camel, отслеживаемую как CVE-2026-56139. Опция muteException управляет тем, возвращается ли клиенту HTTP дета...

undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow는 비동기non-blocking IO 기반의 Java 웹 서버입니다. 다음과 같은 몇 가지 다른 부분으로 구성됩니다: 동기blocking 및 비동기non-blocking IO를 모두 지원하는 코어 HTTP 서버 Servlet 3.1 구현 JSR-356 호환 웹 소켓 구현 Website: http://undertow.io Issues: https://issues.jboss.org/browse/UNDERTOW Project Lead: Stuart Douglas [email protected]...

artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in Red Hat EAP permit deserialization by default

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...

artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation

Artemis CORE protocol channel allows unauthed queue creation. an unauthenticated attacker can send CREATEQUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker. This can be used for resource exhaustion and persistent broker-state...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...