CVE-2021-3629CWE-400

A flaw was found in Undertow

published May 24, 2022

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01322 · 70.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-05-24T18:19Z
EPSS history
Timeline
  • 24 MAY 18:19Z
    A flaw was found in Undertow
    cvelistv5