Threats tagged 'ghsa-356w-cx4r-75hv'

A vulnerability in Undertow allows a remote attacker to cause an Out of Memory condition on the WebSocket endpoint without authentication. This affects any @ServerEndpoint class with an @OnMessage method, enabling a denial of service (DoS) attack via a standard WebSocket handshake. The issue has a high severity score of 7.5 and impacts Red Hat JBoss Enterprise Application Platform 7.4. A security update is available in version 7.4.25 that addresses this flaw.