Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/eap7-undertow@2.2.25-3.SP3_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap7-undertow@2.2.25-3.SP3_redhat_00001.1?arch=el9eap
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-7yc7-e35f-8uhj
Aliases:
CVE-2023-3223
GHSA-65h2-wf7m-q2v8
Uncontrolled Resource Consumption A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:53:06.923248+00:00 RedHat Importer Affected by VCID-7yc7-e35f-8uhj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3223.json 38.0.0