CVE-2023-1108

CVE-2023-1108 affects Undertow within Red Hat JBoss EAP 7.3.x (SSLConduit) where an infinite loop on close can cause DoS. Connected RHSA-2025-9583 confirms the issue and indicates a fix in the eap-7.3.z line (Patched Undertow). Remediation is to upgrade to the patched EAP 7.3.x release (eap-7.3.z...

CVE-2023-3223

CVE-2023-3223 relates to Undertow: Servlets annotated with @MultipartConfig may cause an OutOfMemoryError from large multipart content, enabling remote DoS. A bypass may occur if fileSizeThreshold limits are configured but the file name in the request is set to null. The Nessus plugin notes an un...

CVE-2018-1067

The CVE-2018-1067 entry affects Undertow prior to 7.1.2.CR1 and 7.1.2.GA, where the prior fix for CVE-2016-4993 was incomplete. This leaves Undertow vulnerable to injection of arbitrary HTTP headers and HTTP response splitting due to insufficient sanitization and validation when user input is use...

CVE-2017-12196

CVE-2017-12196 affects Undertow when using Digest authentication. The vulnerability exists because Undertow does not ensure that the URI in the Authorization header matches the HTTP request line, enabling a MITM-like scenario to access content. Affected are Undertow releases prior to 1.4.18.SP1, ...

CVE-2017-12165

Undertow vulnerability CVE-2017-12165 affects Undertow prior to 1.4.17, 1.3.31 and 2.0.0 where HTTP request header processing mishandles unusual whitespace, enabling possible HTTP request smuggling. Root cause: improper parsing of request headers. Impact details are described in the CVE, with hig...

CVE-2017-2670

Concretely affected software: Undertow (undertow-core) prior to version 1.3.28. Root cause: non-clean TCP close leads the WebSocket server to enter an infinite loop on every IO thread, causing a Denial of Service. Impact: availability degradation/high severity DoS; observed in multiple advisories...

CVE-2019-3888

CVE-2019-3888 describes an information exposure in Undertow prior to 2.0.21 where Connectors.executeRootHandler logs the HttpServerExchange object at ERROR level via UndertowLogger.REQUEST_LOGGER.undertowRequestFailed, potentially exposing plain text credentials in log files. Connected documents ...

CVE-2017-2666

CVE-2017-2666 affects Undertow’s HTTP request line parsing, where invalid characters are allowed. This misparsing can be exploited with a proxy that interprets the same request differently, enabling data to be injected into the HTTP response. Practical consequences stated include web-cache poison...

CVE-2019-10184

Undertow (the web server component referenced for CVE-2019-10184) is affected up to version 2.0.23.Final. The issue is an information exposure where web apps’ directory structures can be predicted through API requests made without trailing slashes, enabling partial confidentiality leakage. The li...

CVE-2021-3629

CVE-2021-3629 affects Undertow. The vulnerability is a flow-control handling issue over HTTP/2 that may cause overhead or a denial of service, impacting availability. Affected versions are Undertow prior to 2.0.40.Final and prior to 2.2.11.Final. Remediation: upgrade to Undertow 2.0.40.Final or 2...

CVE-2021-3690

CVE-2021-3690 affects Undertow: a buffer leak on the incoming WebSocket PONG message can cause memory exhaustion leading to DoS. The vulnerability impacts Undertow-based components (WebSocket handling). A security update/patch for Undertow is available per OSV/OESA entries; exploit details are no...

CVE-2020-1745

The CVE-2020-1745 entry describes a file inclusion vulnerability in Undertow’s AJP connector (default port 8009) affecting Undertow 2.0.29.Final and earlier, fixed in 2.0.30.Final. A remote, unauthenticated attacker could read web application files from a vulnerable server; in environments that a...

CVE-2021-3859

CVE-2021-3859 corresponds to an Undertow flaw that triggers a client-side invocation timeout for certain HTTP/2 calls, enabling denial-of-service conditions. Connected advisories (e.g., RHSA-2024:10207) explicitly reference Undertow and cite the issue as the cause for DoS when HTTP2 client invoca...

CVE-2022-2764

CVE-2022-2764 concerns Undertow. A DoS can occur because the Undertow server waits for LAST_CHUNK forever during EJB invocations, impacting availability (per CVSS vector: Network, Low access, High impact to availability). Public details in the provided documents specify the vulnerability as a DoS...

CVE-2022-2053

CVE-2022-2053 affects Undertow’s AJP handling: when a POST through AJP exceeds maxEntitySize, AjpServerRequestConduit closes the connection without a response, potentially causing front-end proxies to mark the backend as in error state andCausing DoS via service interruptions. The Nessus NASL ent...

CVE-2021-3597

CVE-2021-3597 affects Undertow’s HTTP2SourceChannel and can cause DoS by failing to write the final frame. Affected products/versions include Undertow releases prior to 2.0.35.SP1, 2.2.6.SP1, 2.2.7.SP1, 2.0.36.SP1, 2.2.9.Final and 2.0.39.Final. The vulnerability is addressed in Red Hat JBoss EAP ...

CVE-2020-10719

Undertow under CVE-2020-10719 is vulnerable in versions before 2.1.1.Final due to improper handling of invalid HTTP requests with large chunk sizes, enabling HTTP request smuggling. Several connected sources (Red Hat advisories, Mageia security advisory) confirm a fix/update to Undertow 2.1.1.Fin...

CVE-2020-27782

The CVE-2020-27782 issue affects Undertow’s AJP connector. A flaw allows an attacker to trigger denial of service by sending malicious requests or causing abrupt connection closes when query strings use non-RFC compliant characters, potentially impacting availability. Affected versions are Undert...

CVE-2020-10687

The CVE-2020-10687 entry applies to Undertow: all versions before Undertow 2.2.0.Final are affected. The issue arises from HTTP request parsing that permits invalid characters in the request line, enabling HTTP request smuggling across HTTP/1.x and HTTP/2. Consequences documented include web-cach...

CVE-2023-5379

CVE-2023-5379 affects Undertow/AJP handling in Red Hat JBoss EAP, where an AJP request exceeding the max-header-size can cause mod_cluster to mark the backend as an error and close the TCP connection without an AJP response, enabling potential DoS via repeated oversized requests. The connected ad...

CVE-2014-7816

CVE-2014-7816 describes a Directory traversal vulnerability in JBoss Undertow used by WildFly, affecting Undertow 1.0.x before 1.0.17, 1.1.x before 1.1.0.CR5, and 1.2.x before 1.2.0.Beta3 when run on Windows. The flaw allows remote attackers to read arbitrary files via a .. in a resource URI. Pub...

CVE-2024-1459

The CVE-2024-1459 entry concerns Undertow in Red Hat JBoss EAP, where a path-traversal bug allows a remote attacker to append a crafted sequence to an HTTP request and access privileged or restricted files. Root cause: improper validation of HTTP request paths in Undertow, enabling directory trav...

CVE-2019-10212

CVE-2019-10212 affects Undertow (under 2.0.20) where DEBUG logging of io.undertow.request.security can leak user credentials from log files. Reported in multiple sources (including OSV entries and CNVD) as a log-file disclosure vulnerability with network-based access and high confidentiality/inte...

CVE-2021-20220

CVE-2021-20220 relates to Undertow. A regression in the fix for CVE-2020-10687 enables HTTP request smuggling in Undertow when processing HTTP/1.x and HTTP/2 traffic due to invalid characters in the request line. The vulnerability can allow an attacker to poison a web-cache, perform an XSS attack...

CVE-2022-1319

CVE-2022-1319 affects Undertow (via JBoss EAP 7) where an AJP 400 response can trigger two response packets that carry the reuse flag, and the connection reuse logic reads the second SEND_HEADERS instead of CPONG after a CPING. This can lead to a vulnerability in scenarios where connections are r...

CVE-2022-4492

CVE-2022-4492 is linked to Undertow: the undertow client does not verify the server identity presented by the server certificate in HTTPS connections, a TLS-level check that should be performed by default. This can enable weaknesses in TLS client verification and potential MITM scenarios. Connect...

CVE-2019-14888

CVE-2019-14888 affects the Undertow HTTP server prior to version 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to cause a Denial of Service, rendering the SSL service unavailable. The description in the provided documents does not specify exploitable details beyond thi...

CVE-2020-1757

The connected Red Hat advisory RHSA-2024:5856 confirms CVE-2020-1757 in Undertow: servletPath normalization could truncate a path after a semicolon, enabling dangerous application mapping and a security bypass. Affected products/versions include Undertow-based components within Red Hat JBoss EAP ...

CVE-2025-12543

Undertow core in WildFly/JBoss EAP is affected by CVE-2025-12543 due to improper validation of the Host header in HTTP requests. This can allow cache poisoning, internal network discovery, or user session hijacking. The CVSSv3.1 base score is 9.6 (CRITICAL) with network access, low attack complex...

CVE-2022-1259

CVE-2022-1259 is an Undertow-related denial-of-service issue. The root cause is an incomplete fix for CVE-2021-3629, causing potential DoS from HTTP/2 flow-control handling. Connected documents (Nessus plugin references and IBM/Red Hat advisories) confirm this in context of Undertow and note that...

CVE-2017-7559

The CVE-2017-7559 entry concerns Undertow: in 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, the mitigation for CVE-2017-2666 was incomplete, allowing invalid characters in the HTTP request line (query string and path parameters). This can be exploited with a p...

CVE-2020-10705

CVE-2020-10705 affects Undertow prior to 2.1.1.Final, where requests using the Expect: 100-continue header can trigger a memory exhaustion error, potentially causing a denial of service. The vulnerability is documented in the CVE page and appears in related advisories (e.g., Red Hat JBoss EAP 7.x...

CVE-2019-19343

CVE-2019-19343: A memory leak in Undertow’s HttpOpenListener when using Remoting as shipped in Red Hat JBoss EAP before 7.2.4 may allow denial of service by holding remote connections indefinitely. Affected components include Undertow versions before 2.0.25.SP1 and jboss-remoting 5.0.14.SP1. The ...

CVE-2018-1114

CVE-2018-1114 corresponds to an Undertow issue where URLResource.getLastModified() closes file descriptors only when finalized, enabling a file descriptor leak and potential exhaustion. The vulnerability is evidenced in multiple sources (GHSA- GJJX-GQM4-WCGM, Red Hat advisories) describing an unc...

CVE-2018-14642

CVE-2018-14642: Information leakage in Undertow due to improper buffer flushing may expose data across requests. Connected advisories show Red Hat JBoss EAP 7.2.1 on RHEL7 includes a security update (RHSA-2019:1108) addressing this Undertow info leak. The vulnerability details indicate the leak o...

CVE-2026-28369

Undertow contains a vulnerability where the first HTTP header line with leading spaces is stripped, violating HTTP standards and enabling request smuggling. Affected component: Undertow HTTP header parsing. Root cause: improper handling that trims leading spaces on the initial header line. Impact...

CVE-2026-28367

Undertow contains a flaw that allows HTTP request smuggling by sending a header terminator of \r\r\r. A remote attacker could exploit this against certain proxies (e.g., older Apache Traffic Server, Google Cloud Classic Application Load Balancer) to cause unauthorized access or manipulation of we...

CVE-2025-9784

CVE-2025-9784 (MadeYouReset) is a Denial of Service flaw in Undertow where malformed client requests trigger server-side stream resets, allowing high resource load via HTTP/2. The Red Hat/IBM advisory ties the affected product to IBM InfoSphere Information Server (11.7.x) using Undertow; affected...

CVE-2026-28368

A vulnerability (CVE-2026-28368) affects Undertow and involves a discrepancy in header parsing between Undertow and upstream proxies, enabling HTTP request smuggling. Reported across multiple sources (NVD, Debian/Ubuntu OSV, Circl, GitHub advisories, and Nessus plugin) with confirmed references t...