NetSight
IP …
high7.5

CVE-2024-4109

Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse

Impact

# Withdrawn Advisory This advisory has been withdrawn because it was determined to not be a valid vulnerability. This link is maintained to preserve external references. For more information, see https://nvd.nist.gov/vuln/detail/CVE-2024-4109. # Original Description A flaw was found in Undertow. An HTTP request header value from a previous stream may be incorrectly reused for a request associated with a subsequent stream on the same HTTP/2 connection. This issue can potentially lead to information leakage between requests.

Affected packages

EcosystemPackageAffectedFixed in
mavenio.undertow:undertow-core<= 2.3.18.Finalnone recorded

Weakness classification

CWE-200

References