In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to th...

References

• advisory https://access.redhat.com/errata/RHSA-2018:1247
• advisory https://access.redhat.com/errata/RHSA-2018:1248
• advisory https://access.redhat.com/errata/RHSA-2018:1249
• advisory https://access.redhat.com/errata/RHSA-2018:1251
• advisory https://access.redhat.com/errata/RHSA-2018:2643
• advisory https://access.redhat.com/errata/RHSA-2019:0877
• report https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1067