CVE-2026-3260

Undertow-based products are affected by CVE-2026-3260. A flaw allows remote attackers to trigger Denial of Service by sending an HTTP GET request containing multipart/form-data; if applications parse parameters with getParameterMap(), Undertow may prematurely parse and store content to disk, cons...

Undertow 安全漏洞

Undertow is a web server provided by the Undertow company in the United States. Undertow has a security vulnerability that arises from the possibility of premature parsing and storage of content when handling HTTP GET requests containing multipart/form-data. This vulnerability may lead to resourc...