CVE-2022-2053

When a POST request comes through AJP and the request exceeds the max-post-size limit maxEntitySize, Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a front-end proxy marking the backend worker...

PT-2022-14744

Name of the Vulnerable Software and Affected Versions Undertow versions prior to 2.2.19.Final Undertow versions prior to 2.3.0.Alpha2 Description When a POST request comes through AJP and the request exceeds the max-post-size limit maxEntitySize, Undertow's AjpServerRequestConduit implementation...