Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-2271

CVE-2023-3223 Large uploaded file does not persist to disk if the filename is omitted

XMLWordPrintable

      There exists a security vulnerability in Undertow that can cause remote DoS attacks.

      Servlets with multipart support (e.g. annotated with @MultipartConfig) that call HttpServletRequest.getParameter() or HttpServletRequest.getParts() may cause OutOfMemoryError when the client sends a multipart request with a part that has a very large content.

              rhn-engineering-lgao Lin Gao
              rhn-engineering-lgao Lin Gao
              Flavia Rainone
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: