-
Bug
-
Resolution: Done
-
Major
-
30.0.0.Final, 30.0.1.Final
-
None
-
-
---
-
---
Beginning with wildfly 30.0.0 parameter with more than 16425 Bytes input data are ignored if form has enctype "multipart/form-data"
BackingBean:
package bug;
import java.io.Serializable;
import jakarta.enterprise.context.RequestScoped;
import jakarta.inject.Named;
@Named
@RequestScoped
public class BackingBean implements Serializable{
private String content;
private String test = "1";
public String getContent() {
return content;
}
public void setContent(String content) {
this.content = content;
}
public String getTest() {
return test;
}
public void setTest(String test) {
this.test = test;
}
public void action() {
test +="AAAAAAAAAAAAAAAAAAAAAAA\n";
System.out.println("Size of test:"+test.length());
}
{color:#000000}}
index.xhtml
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:h="jakarta.faces.html"
lang="de">
<h:head>
</h:head>
<h:body>
<h:form enctype="multipart/form-data" id="testForm">
<h:inputTextarea value="#{backingBean.test}" cols="20" rows="10"/>
<br/>
<h:commandButton value="Submit" action="#{backingBean.action}" id="btn"/>
</h:form>
<script >
document.getElementById("testForm\:btn").click();
</script>
</h:body>
</html>
- is caused by
-
UNDERTOW-2271 CVE-2023-3223 Large uploaded file does not persist to disk if the filename is omitted
- Closed
- is duplicated by
-
WFLY-18847 Problems sending LARGE inputfields using WildFly 30 and Mojarra 4
- Closed
- is related to
-
UNDERTOW-2337 Multipart form-data larger than 16KiB is not available through Servlet getParameter API
- Closed
- relates to
-
JBEAP-26355 [GSS](7.4.z) UNDERTOW-2337 - Multipart form-data larger than 16KiB is not available through Servlet getParameter API after EAP 7.4.12 (CVE-2023-3223 / UNDERTOW-2271 fix)
- Closed
-
JBEAP-26413 [GSS](8.0.z) UNDERTOW-2337 - Multipart form-data larger than 16KiB is not available through Servlet getParameter API after EAP 7.4.12 (CVE-2023-3223 / UNDERTOW-2271 fix)
- Closed