undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

io.undertow:undertow-servlet (1.0.0.alpha2), io.undertow:undertow-websockets-jsr (1.0.0.alpha2) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha2)

io.undertow:undertow-core MAVEN version 1.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha2 - io.undertow:undertow-websockets-jsr 1.0.0.alpha2 Source...

io.undertow:undertow-servlet (1.0.0.alpha3), io.undertow:undertow-websockets-jsr (1.0.0.alpha3) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha3)

io.undertow:undertow-core MAVEN version 1.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha3 - io.undertow:undertow-websockets-jsr 1.0.0.alpha3 Source...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...

io.undertow:undertow-servlet (1.0.0.alpha6), io.undertow:undertow-websockets-jsr (1.0.0.alpha6) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha6)

io.undertow:undertow-core MAVEN version 1.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha6 - io.undertow:undertow-websockets-jsr 1.0.0.alpha6 Source...

io.undertow:undertow-servlet (1.0.0.alpha13), io.undertow:undertow-websockets-jsr (1.0.0.alpha13) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha13)

io.undertow:undertow-core MAVEN version 1.0.0.alpha13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha13 - io.undertow:undertow-websockets-jsr 1.0.0.alpha13 Source...

io.undertow:undertow-servlet (1.0.0.alpha17), io.undertow:undertow-websockets-jsr (1.0.0.alpha17) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha17)

io.undertow:undertow-core MAVEN version 1.0.0.alpha17 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha17 - io.undertow:undertow-websockets-jsr 1.0.0.alpha17 Source...

io.undertow:undertow-servlet (1.0.0.beta8), io.undertow:undertow-websockets-jsr (1.0.0.beta8) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.beta8)

io.undertow:undertow-core MAVEN version 1.0.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta8 - io.undertow:undertow-websockets-jsr 1.0.0.beta8 Source cves:...

io.undertow:undertow-servlet (1.0.0.beta12), io.undertow:undertow-websockets-jsr (1.0.0.beta12) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.beta12)

io.undertow:undertow-core MAVEN version 1.0.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta12 - io.undertow:undertow-websockets-jsr 1.0.0.beta12 Source...

io.undertow:undertow-dist (1.0.0.beta13), io.undertow:undertow-servlet (1.0.0.beta13) +1 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.beta13)

io.undertow:undertow-core MAVEN version 1.0.0.beta13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-dist 1.0.0.beta13 - io.undertow:undertow-servlet 1.0.0.beta13 -...

io.undertow:undertow-servlet (1.0.0.alpha9), io.undertow:undertow-websockets-jsr (1.0.0.alpha9) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha9)

io.undertow:undertow-core MAVEN version 1.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha9 - io.undertow:undertow-websockets-jsr 1.0.0.alpha9 Source...

io.undertow:undertow-servlet (1.0.0.alpha11), io.undertow:undertow-websockets-jsr (1.0.0.alpha11) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha11)

io.undertow:undertow-core MAVEN version 1.0.0.alpha11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha11 - io.undertow:undertow-websockets-jsr 1.0.0.alpha11 Source...

io.undertow:undertow-servlet (1.0.0.alpha16), io.undertow:undertow-websockets-jsr (1.0.0.alpha16) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha16)

io.undertow:undertow-core MAVEN version 1.0.0.alpha16 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha16 - io.undertow:undertow-websockets-jsr 1.0.0.alpha16 Source...

io.undertow:undertow-servlet (1.0.0.beta5), io.undertow:undertow-websockets-jsr (1.0.0.beta5) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.beta5)

io.undertow:undertow-core MAVEN version 1.0.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta5 - io.undertow:undertow-websockets-jsr 1.0.0.beta5 Source cves:...

io.undertow:undertow-servlet (1.0.0.alpha18), io.undertow:undertow-websockets-jsr (1.0.0.alpha18) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.alpha18)

io.undertow:undertow-core MAVEN version 1.0.0.alpha18 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha18 - io.undertow:undertow-websockets-jsr 1.0.0.alpha18 Source...

io.undertow:undertow-servlet (1.0.0.beta19), io.undertow:undertow-websockets-jsr (1.0.0.beta19) potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.beta19)

io.undertow:undertow-core MAVEN version 1.0.0.beta19 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta19 - io.undertow:undertow-websockets-jsr 1.0.0.beta19 Source...

io.undertow:undertow-servlet (1.0.0.beta21), io.undertow:undertow-websockets-jsr (1.0.0.beta21) +1 more potentially affected by CVE-2020-1745 via io.undertow:undertow-core (1.0.0.beta21)

io.undertow:undertow-core MAVEN version 1.0.0.beta21 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta21 - io.undertow:undertow-websockets-jsr 1.0.0.beta21 -...