REDHAT-BUG-2443010: Medium severity Red Hat Undertow vulnerability
A vulnerability was identified in Undertow (as used in Wildfly) where the server prematurely parses and stores multipart/form-data content to the disk when receiving an HTTP GET request, provided the underlying application (e.g., JSF) invokes parameter-parsing methods like getParameterMap().
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2443010?
The severity of REDHAT-BUG-2443010 is considered to be high due to the potential exposure of sensitive data.
How do I fix REDHAT-BUG-2443010?
To fix REDHAT-BUG-2443010, ensure that your applications do not invoke parameter-parsing methods on multipart/form-data content over HTTP GET requests.
Which versions of WildFly are affected by REDHAT-BUG-2443010?
REDHAT-BUG-2443010 affects all versions of Red Hat WildFly that utilize the Undertow framework.
Where does REDHAT-BUG-2443010 manifest?
REDHAT-BUG-2443010 manifests when an application improperly handles multipart/form-data in HTTP GET requests.
Is REDHAT-BUG-2443010 specific to any particular application framework?
Yes, REDHAT-BUG-2443010 is primarily relevant to applications using JSF that utilize Undertow for handling HTTP requests.