Information Exposure SNYK-JAVA-IOUNDERTOW-8501333

[github-actions]

Overview

io.undertow:undertow-core is a Java web server based on non-blocking IO.

Affected versions of this package are vulnerable to Information Exposure via the reuse of HTTP/2 request headers. An attacker can access sensitive information from previous requests by exploiting the incorrect reuse of header values across different streams on the same connection.

Remediation

There is no fixed version for io.undertow:undertow-core.

References

• Vulnerable Code