Beveiligingsadvies

CVE-2024-4027

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-30 14:25:54
Laatst bijgewerkt 2026-09-01 12:04:59
Toegewezen door redhat
CVSS-score 7.5
Status PUBLISHED

Beschrijving

A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service (DoS) attack.