Yüksek CVSS 7.5

CVE-2025-9784: Build Of Apache Camel For Spring Boot: güvenlik açığı

Yayın: 2 Eylül 2025 17:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).

Özet bilgiler

Ürün: Redhat Build Of Apache Camel For Spring Boot
CVSS v3.1: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: %2,33 (yüzdelik 84)
CWE: CWE-770
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
redhat-build-of-apache-camel-for-spring-boot	—	—	—
redhat-fuse	7.0.0	7.0.0	—
redhat-jboss-enterprise-application-platform	7.0.0	7.0.0	—
redhat-jboss-enterprise-application-platform	8.0.0	8.0.0	—
redhat-jboss-enterprise-application-platform-expansion-pack	—	—	—
redhat-process-automation	7.0	7.0	—
redhat-single-sign-on	7.0	7.0	—
redhat-undertow	—	—	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları