Jboss Fuse vulnerabilities

3 known vulnerabilities in Jboss Fuse from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  HawtIO 4.0.0 for Red Hat build of Apache Camel 4: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2024-7885Aug 21, 2024Red HatEPSS 2.64%

  A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a resu

• 7.5 High severity

  undertow: Server-Side Request Forgery

  CVE-2022-4492Feb 23, 2023Undertow

  The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

• 7.5 High severity

  Undertow: Uncontrolled Resource Consumption

  CVE-2022-2053Aug 5, 2022UndertowEPSS 1.09%

  When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a front