https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 04 May 2026 01:26:59 +0000 https://db.gcve.eu/sighting/d3552cd5-97da-4f80-aeb2-18618d569db0/export {"uuid": "d3552cd5-97da-4f80-aeb2-18618d569db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:5143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1110", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3653\n\ud83d\udd39 Description: A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.\n\ud83d\udccf Published: 2024-07-08T21:21:20.899Z\n\ud83d\udccf Modified: 2025-01-09T21:35:52.649Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:5143\n3. https://access.redhat.com/errata/RHSA-2024:5144\n4. https://access.redhat.com/errata/RHSA-2024:5145\n5. https://access.redhat.com/errata/RHSA-2024:5147\n6. https://access.redhat.com/errata/RHSA-2024:6437\n7. https://access.redhat.com/security/cve/CVE-2024-3653\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2274437", "creation_timestamp": "2025-01-09T22:16:14.000000Z"} {"uuid": "d3552cd5-97da-4f80-aeb2-18618d569db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:5143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1110", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3653\n\ud83d\udd39 Description: A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.\n\ud83d\udccf Published: 2024-07-08T21:21:20.899Z\n\ud83d\udccf Modified: 2025-01-09T21:35:52.649Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:5143\n3. https://access.redhat.com/errata/RHSA-2024:5144\n4. https://access.redhat.com/errata/RHSA-2024:5145\n5. https://access.redhat.com/errata/RHSA-2024:5147\n6. https://access.redhat.com/errata/RHSA-2024:6437\n7. https://access.redhat.com/security/cve/CVE-2024-3653\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2274437", "creation_timestamp": "2025-01-09T22:16:14.000000Z"} https://db.gcve.eu/sighting/d3552cd5-97da-4f80-aeb2-18618d569db0/export Thu, 09 Jan 2025 22:16:14 +0000 https://db.gcve.eu/sighting/5bb0159b-0e8e-44b7-9a6d-4611fa9d1b7d/export {"uuid": "5bb0159b-0e8e-44b7-9a6d-4611fa9d1b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:5143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5446", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3653\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.\n\ud83d\udccf Published: 2024-07-08T21:21:20.899Z\n\ud83d\udccf Modified: 2025-02-26T04:13:19.878Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:5143\n3. https://access.redhat.com/errata/RHSA-2024:5144\n4. https://access.redhat.com/errata/RHSA-2024:5145\n5. https://access.redhat.com/errata/RHSA-2024:5147\n6. https://access.redhat.com/errata/RHSA-2024:6437\n7. https://access.redhat.com/security/cve/CVE-2024-3653\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2274437", "creation_timestamp": "2025-02-26T04:24:30.000000Z"} {"uuid": "5bb0159b-0e8e-44b7-9a6d-4611fa9d1b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:5143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5446", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3653\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.\n\ud83d\udccf Published: 2024-07-08T21:21:20.899Z\n\ud83d\udccf Modified: 2025-02-26T04:13:19.878Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:5143\n3. https://access.redhat.com/errata/RHSA-2024:5144\n4. https://access.redhat.com/errata/RHSA-2024:5145\n5. https://access.redhat.com/errata/RHSA-2024:5147\n6. https://access.redhat.com/errata/RHSA-2024:6437\n7. https://access.redhat.com/security/cve/CVE-2024-3653\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2274437", "creation_timestamp": "2025-02-26T04:24:30.000000Z"} https://db.gcve.eu/sighting/5bb0159b-0e8e-44b7-9a6d-4611fa9d1b7d/export Wed, 26 Feb 2025 04:24:30 +0000 https://db.gcve.eu/sighting/70aa226d-c8f2-41cf-b6f5-2611fe6c28ad/export {"uuid": "70aa226d-c8f2-41cf-b6f5-2611fe6c28ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:5143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5971\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\\r\\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.\n\ud83d\udccf Published: 2024-07-08T20:51:29.223Z\n\ud83d\udccf Modified: 2025-03-03T14:17:30.281Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:4884\n3. https://access.redhat.com/errata/RHSA-2024:5143\n4. https://access.redhat.com/errata/RHSA-2024:5144\n5. https://access.redhat.com/errata/RHSA-2024:5145\n6. https://access.redhat.com/errata/RHSA-2024:5147\n7. https://access.redhat.com/errata/RHSA-2024:6508\n8. https://access.redhat.com/errata/RHSA-2024:6883\n9. https://access.redhat.com/security/cve/CVE-2024-5971\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2292211", "creation_timestamp": "2025-03-03T14:30:00.000000Z"} {"uuid": "70aa226d-c8f2-41cf-b6f5-2611fe6c28ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:5143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5971\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\\r\\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.\n\ud83d\udccf Published: 2024-07-08T20:51:29.223Z\n\ud83d\udccf Modified: 2025-03-03T14:17:30.281Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:4884\n3. https://access.redhat.com/errata/RHSA-2024:5143\n4. https://access.redhat.com/errata/RHSA-2024:5144\n5. https://access.redhat.com/errata/RHSA-2024:5145\n6. https://access.redhat.com/errata/RHSA-2024:5147\n7. https://access.redhat.com/errata/RHSA-2024:6508\n8. https://access.redhat.com/errata/RHSA-2024:6883\n9. https://access.redhat.com/security/cve/CVE-2024-5971\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2292211", "creation_timestamp": "2025-03-03T14:30:00.000000Z"} https://db.gcve.eu/sighting/70aa226d-c8f2-41cf-b6f5-2611fe6c28ad/export Mon, 03 Mar 2025 14:30:00 +0000 https://db.gcve.eu/sighting/fd86c760-3522-4b8f-aab3-b9db893f9e5b/export {"uuid": "fd86c760-3522-4b8f-aab3-b9db893f9e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:5143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18810", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3653\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.\n\ud83d\udccf Published: 2024-07-08T21:21:20.899Z\n\ud83d\udccf Modified: 2025-06-18T18:51:22.323Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:5143\n3. https://access.redhat.com/errata/RHSA-2024:5144\n4. https://access.redhat.com/errata/RHSA-2024:5145\n5. https://access.redhat.com/errata/RHSA-2024:5147\n6. https://access.redhat.com/errata/RHSA-2024:6437\n7. https://access.redhat.com/security/cve/CVE-2024-3653\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2274437", "creation_timestamp": "2025-06-18T19:39:59.000000Z"} {"uuid": "fd86c760-3522-4b8f-aab3-b9db893f9e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "RHSA-2024:5143", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18810", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-3653\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.\n\ud83d\udccf Published: 2024-07-08T21:21:20.899Z\n\ud83d\udccf Modified: 2025-06-18T18:51:22.323Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:4392\n2. https://access.redhat.com/errata/RHSA-2024:5143\n3. https://access.redhat.com/errata/RHSA-2024:5144\n4. https://access.redhat.com/errata/RHSA-2024:5145\n5. https://access.redhat.com/errata/RHSA-2024:5147\n6. https://access.redhat.com/errata/RHSA-2024:6437\n7. https://access.redhat.com/security/cve/CVE-2024-3653\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2274437", "creation_timestamp": "2025-06-18T19:39:59.000000Z"} https://db.gcve.eu/sighting/fd86c760-3522-4b8f-aab3-b9db893f9e5b/export Wed, 18 Jun 2025 19:39:59 +0000