CVE-2020-27782CWE-400

A flaw was found in the Undertow AJP connector

published February 23, 2021

CVSS
—
EPSS
1%
Percentile
71.8
In the wild
Unconfirmed
What it is

A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1, 2.0.33.SP2, and 2.2.3.SP1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01375 · 71.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-02-23T18:35Z
EPSS history
Timeline
  • 23 FEB 18:35Z
    A flaw was found in the Undertow AJP connector
    cvelistv5