Description
A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2017-10348 Vulnerability (CVE-2017-10348)
WordPress Plugin InstaWP Connect-1-click WP Staging & Migration Arbitrary File Upload (0.1.0.22)
qdPM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-11811)
WordPress Plugin Jigoshop-Store Toolkit Privilege Escalation (1.3.7)
MediaWiki Improper Access Control Vulnerability (CVE-2016-6336)