tocsin

Debian/undertow: high 7.5

A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method proces

Action: Upgrade undertow to 2.3.18-1 or later.

Affected

introducedfixedlast affected
02.3.18-1-

Fixed versions

2.3.18-1

Sources

published · modified · JSON