Description
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
Remediation
References
Related Vulnerabilities
WordPress Plugin Apptivo Business Site CRM Multiple Cross-Site Scripting Vulnerabilities (1.2.9)
Oracle HTTP Server CVE-2023-22019 Vulnerability (CVE-2023-22019)
WordPress Plugin Age Gate Unspecified Vulnerability (2.18.5)
Moodle Improper Input Validation Vulnerability (CVE-2011-4302)
Joomla Insufficient Verification of Data Authenticity Vulnerability (CVE-2020-15699)