Denial Of Service (DOS)

io.undertow: undertow-servlet is vulnerable to Denial Of Service DOS. The vulnerability is caused by excessive memory consumption due to large multipart content upload handling resulting in OutOfMemoryError while processing @MultipartConfig annotated servlets. This can allow unauthorized users to...

Information Disclosure

undertow-servlet is vulnerable to information disclosure. A remote attacker is able to discover directory structures using requests without trailing slashes via the API...