CVE-2021-3859
Assigner: redhat
Published: 2022-08-26T00:00:00
State: PUBLISHED
descriptions: value: A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.
affected: vendor: n/a
product: undertow
versions: version: Fixed in 2.2.15.Final
status: affected
problemTypes: descriptions: type: CWE
description: CWE-214 - Invocation of Process Using Visible Sensitive Information
cweId: CWE-214