{"action":"Upgrade io.undertow:undertow-core to 2.2.32.Final (2.2.x) or 2.3.13.Final (2.3.x) or later.","affected":[{"fixed":"2.2.32.Final","introduced":"0"},{"fixed":"2.3.13.Final","introduced":"2.3.0.Alpha1"}],"component":"io.undertow:undertow-core","cve_ids":["CVE-2023-1973"],"ecosystem":"Maven","epss":0.01284,"exploited":false,"fixed_versions":["2.2.32.Final","2.3.13.Final"],"ghsa_id":"GHSA-97cq-f4jm-mv8h","id":"tcs_01M5N8PE7Z13E2VSHPB4RYYH8G","modified_at":"2024-11-07T18:57:17.001936Z","published_at":"2024-11-07T12:30:34Z","references":["https://osv.dev/vulnerability/GHSA-97cq-f4jm-mv8h","https://nvd.nist.gov/vuln/detail/CVE-2023-1973","https://github.com/undertow-io/undertow/commit/0410f3c4d9b39b754a2203a29834cac51da11258","https://github.com/undertow-io/undertow/commit/b289b18bc0ba40c134698a430c70ca1835c51d78","https://access.redhat.com/errata/RHSA-2024:1674","https://access.redhat.com/errata/RHSA-2024:1675","https://access.redhat.com/errata/RHSA-2024:1676","https://access.redhat.com/errata/RHSA-2024:1677","https://access.redhat.com/errata/RHSA-2024:2763","https://access.redhat.com/errata/RHSA-2024:2764","https://access.redhat.com/security/cve/CVE-2023-1973","https://bugzilla.redhat.com/show_bug.cgi?id=2185662","https://github.com/undertow-io/undertow"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-97cq-f4jm-mv8h","url":"https://osv.dev/vulnerability/GHSA-97cq-f4jm-mv8h"}],"summary":"Undertow Denial of Service vulnerability"}