CVE-2025-9784

Name of the Vulnerable Software and Affected Versions Undertow (affected versions not specified)

Description A flaw exists in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, known as the “MadeYouReset” attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts, potentially leading to a denial of service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.