PT-2022-10500
CVE-2021-3629
·
تاريخ النشر
2022-05-24
·
تاريخ التحديث
2023-02-07
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Undertow versions prior to 2.0.40.Final
Undertow versions prior to 2.2.11.Final
Description
A flaw was found in Undertow, related to a potential security issue in flow control handling by the browser over HTTP/2, which may cause overhead or a denial of service in the server. The highest threat from this issue is availability.
Recommendations
For Undertow versions prior to 2.0.40.Final, update to version 2.0.40.Final or later.
For Undertow versions prior to 2.2.11.Final, update to version 2.2.11.Final or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾