← Database

CVE-2022-1259

HIGH CVSS: 7.5 Published: 2022-08-31 Modified: 2026-06-17

Description

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.

Affected Platforms

Redhat UndertowRedhat Openshift Application RuntimesRedhat Single Sign-OnRedhat Integration Camel KNetapp Oncommand InsightNetapp Cloud Secure AgentNetapp Oncommand Workflow AutomationNetapp Active Iq Unified ManagerRedhat Build Of QuarkusRedhat Jboss Enterprise Application Platform

Weakness Type

CWE-400, NVD-CWE-noinfo

References