Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Critical
Fix Version/s: 2.2.30.SP1, 2.3.13.Final, 2.3.11.SP1, 2.2.32.Final
Affects Version/s: None
Component/s: None
Labels:
None

Git Pull Request:
https://gitlab.cee.redhat.com/undertow-io/undertow/-/merge_requests/76, https://gitlab.cee.redhat.com/undertow-io/undertow/-/merge_requests/82, https://gitlab.cee.redhat.com/undertow-io/undertow/-/commit/6ab54a4e07dd93b2e7bbf58d81de3ad50d09742d, https://gitlab.cee.redhat.com/undertow-io/undertow/-/commit/dcb2933a87447aaf2d8151fa08653e1b333cce26, https://github.com/undertow-io/undertow/pull/1581, https://github.com/undertow-io/undertow/pull/1583

FormAuthenticationMechanism creates SessionImpl objects for every attempt to login, even unsuccessful ones. Those sessions have strings with the location attached and are not being cleaned up properly.

causes

JBEAP-26990 [GSS](7.4.z) UNDERTOW-2378 - Adjust properly session timeout also in case when custom auth mechanisms are used

Open

UNDERTOW-2378 Adjust properly session timeout also in case when custom auth mechanisms are used

Pull Request Sent

JBEAP-26991 [GSS](8.0.z) UNDERTOW-2378 - Adjust properly session timeout also in case when custom auth mechanisms are used

Pull Request Sent

is incorporated by

WFCORE-6794 CVE-2023-1973 Upgrade Undertow to 2.3.13.Final

Resolved

Assignee:: Richard Opalka

Reporter:: Flavia Rainone

Involved:: Bartosz Baranowski, Carlo de Wolf, Chao Wang, Chess Hazlett, Flavia Rainone, Jason Lee, Lin Gao, Masafumi Miura, Richard Opalka, Stefano Maestri, Stuart Douglas, Tom Jenkinson

Votes:: 0 Vote for this issue

Watchers:: 6 Start watching this issue

Created:: 2023/04/21 8:24 PM

Updated:: 2024/04/23 1:11 PM

Resolved:: 2024/02/13 10:23 AM

Details

Description

Attachments

Issue Links

Activity

People

Dates