Launch Week Day 1: Announcing Security Design Review
HIGH 7.5 Maven

Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse

GHSA-22c5-cpvr-cfvq

Published ยท Modified

Description

Withdrawn Advisory

This advisory has been withdrawn because it was determined to not be a valid vulnerability. This link is maintained to preserve external references. For more information, see https://nvd.nist.gov/vuln/detail/CVE-2024-4109.

Original Description

A flaw was found in Undertow. An HTTP request header value from a previous stream may be incorrectly reused for a request associated with a subsequent stream on the same HTTP/2 connection. This issue can potentially lead to information leakage between requests.

Ready to move

Start Securing

Free, no credit card | First findings in minutes