CVE-2024-4109
Undertow: information leakage via http/2 request header reuse
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Undertow: information leakage via http/2 request header reuse
A flaw was found in Undertow. An HTTP request header value from a previous stream may be incorrectly reused for a request associated with a subsequent stream on the same HTTP/2 connection. This issue can potentially lead to information leakage between requests.
Reserved 2024-04-24 | Published 2024-12-12 | Updated 2024-12-12 | Assigner redhatExposure of Sensitive Information to an Unauthorized Actor
| 2024-03-30: | Reported to Red Hat. |
| 2024-12-10: | Made public. |
access.redhat.com/security/cve/CVE-2024-4109
bugzilla.redhat.com/show_bug.cgi?id=2272325 (RHBZ#2272325)
Support options
