Search for packages
| purl | pkg:maven/io.undertow/undertow-core@2.1.5 |
| Tags | Ghost |
| Next non-vulnerable version | 2.3.19.Final |
| Latest non-vulnerable version | 2.3.19.Final |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-dp1n-kzf6-8bf9
Aliases: CVE-2020-27782 GHSA-rhcw-wjcm-9h6g |
Denial of service in Undertow A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability. This affects Undertow 2.1.5.SP1, 2.0.33.SP2, and 2.2.3.SP1. |
Affected by 16 other vulnerabilities. Affected by 15 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-01T11:16:21.188584+00:00 | GitLab Importer | Affected by | VCID-dp1n-kzf6-8bf9 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2020-27782.yml | 37.0.0 |
| 2025-07-31T12:30:49.888157+00:00 | GHSA Importer | Fixing | VCID-dp1n-kzf6-8bf9 | https://github.com/advisories/GHSA-rhcw-wjcm-9h6g | 37.0.0 |
| 2025-07-31T09:01:56.925309+00:00 | GithubOSV Importer | Fixing | VCID-dp1n-kzf6-8bf9 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/02/GHSA-rhcw-wjcm-9h6g/GHSA-rhcw-wjcm-9h6g.json | 37.0.0 |