CVSS 9.6 · Critical EPSS 1,3%
Kerentanan Improper Input Validation pada redhat build of apache camel, redhat data grid +6 lainnya. Skor CVSS 3.1 9.6 (Critical) menurut NVD.
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| redhat | build of apache camel | Semua versi sebelum 4.14.4 |
| redhat | data grid | Versi 8.0 |
| redhat | fuse | Versi 7.0.0 |
| redhat | jboss enterprise application platform | Versi 8.0 hingga sebelum 8.0.12 |
| redhat | jboss enterprise application platform | Versi 8.1.0 hingga sebelum 8.1.3 |
| redhat | jboss enterprise application platform | Semua versi |
| redhat | jboss enterprise application platform | Versi 7.0.0 |
| redhat | jboss enterprise application platform expansion pack | Semua versi |
| redhat | process automation | Versi 7.0 |
| redhat | single sign-on | Versi 7.0 |
| redhat | undertow | Semua versi sebelum 2.2.39 |
| redhat | undertow | Versi 2.3.0 hingga sebelum 2.3.21 |