CVE-2026-56139

Reproducción de la divulgación de stack trace por muteException en camel-undertow Rest DSL CVE-2026-56139 Este proyecto demuestra un problema de divulgación de información en el consumidor Rest DSL de camel-undertow de Apache Camel, registrado como CVE-2026-56139. La opción muteException controla...

CVE-2026-78329

CVE-2026-78329 — camel-undertow: la estrategia de filtrado de cabeceras no se aplica inyección websocket. Reproductor ejecutable de prueba de concepto para la vulnerabilidad de Apache Camel en la que UndertowEndpoint usaba por defecto como headerFilterStrategy la base HttpHeaderFilterStrategy y...

undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow 是一个基于非阻塞 IO 的 Java Web 服务器。它由几个不同的部分组成： 一个同时支持阻塞和非阻塞 IO 的核心 HTTP 服务器 一个 Servlet 3.1 实现 一个符合 JSR-356 规范的 WebSocket 实现 网站：http://undertow.io 问题追踪：https://issues.jboss.org/browse/UNDERTOW 项目负责人：Stuart Douglas [email protected] 邮件列表：[email protected]...

CVE-2026-49365

CVE-2026-49365 — camel-netty-http / camel-undertow muteException 堆栈跟踪信息泄露 针对同一 Apache Camel 漏洞的可运行概念验证（PoC）复现程序，每种运行时各一个： 运行时| 目录| 技术栈| 所展示的组件 ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| netty-http 与 undertow Camel Quarkus| camel-quarkus/|...

CVE-2025-9784

CVE-2025-9784 MadeYouReset HTTP/2 漏洞测试 概述 本仓库包含一个简单实用的 Bash 脚本，用于测试 Undertow HTTP/2 服务器实现中的 CVE-2025-9784 漏洞（即“MadeYouReset”HTTP/2 拒绝服务（DoS）攻击）。该漏洞允许攻击者通过反复触发服务器端的流重置，导致服务器工作负载过高，进而可能引发服务中断。 特性 检测目标服务器是否支持 HTTP/2 协议。 测量基准响应时间。 模拟快速并发创建 HTTP/2 流以触发重置。 分析服务器在负载下的响应行为。 提供直观的漏洞评估报告。 开始使用 前提条件 Bash...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF 绕过 CVE-2026-21876 Docker 容器 + 最小 PoC。 我特别感谢 @airween 和 @fzipi 的快速响应！漏洞修复在很短时间内就准备好了。 PoC 运行： root@kitploit: cd springbootundertowstand or aspnetstand docker compose up --build python3 demo/send.py BASELINE - 403, BYPASS - 200 + reconstructed payload 参考文献 GitHub 安全公告...

CVE-2025-12543-Fix-for-Wildfly

WildFly 11.0.0.Final 基础镜像 — CVE-2025-12543 补丁 概述 本仓库提供了一个基于 WildFly 11.0.0.Final 构建的 Docker 基础镜像，其中包含针对 CVE-2025-12543 的向后移植修复。该漏洞是 Undertow 中一个严重的 Host 头验证漏洞。 该镜像旨在作为基础镜像提供给同事。他们可以在此基础上部署自己的 .war 应用和 standalone.xml。 CVE-2025-12543 摘要 字段| 详情 ---|--- CVE ID| CVE-2025-12543 组件|...

CVE-2026-81624

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

UBUNTU-CVE-2026-81624

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

CVE-2026-81624

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

CVE-2026-81624 Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

CVE-2026-81624

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

EUVD-2026-68411

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

CVE-2026-81624

Undertow , the web server used in JBoss EAP and WildFly , contains a flaw in how it handles WebSocket connections . Specifically, configuration limits such as message buffer sizes and session timeouts default to being unlimited and cannot be adjusted, allowing a remote, unauthenticated attacker t...

CVE-2026-81624 Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

CVE-2026-81624

Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...

Linux Distros Unpatched Vulnerability : CVE-2026-81624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certai...

DEBIAN-CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

UBUNTU-CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...