Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-356w-cx4r-75hv

Опубликовано: 11 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.

EPSS

Процентиль: 39%
0.00476
Низкий

7.5 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 7.5
ubuntu
5 дней назад

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.

CVSS3: 7.5
redhat
7 дней назад

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.

CVSS3: 7.5
nvd
7 дней назад

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.

CVSS3: 7.5
debian
7 дней назад

A flaw was found in Undertow. A remote attacker can cause Out of Memor ...

EPSS

Процентиль: 39%
0.00476
Низкий

7.5 High

CVSS3

Дефекты

CWE-120