CVE-2021-3690 @ Maven-io.undertow:undertow-websockets-jsr-2.2.4.Final

[AASMACMX]

Vulnerable Package issue exists @ Maven-io.undertow:undertow-websockets-jsr-2.2.4.Final in branch main

Buffer leak on incoming WebSocket PONG message(s) in Undertow prior to 2.0.40.Final and 2.1.x prior to 2.2.10.Final can lead to memory exhaustion and allow a denial of service.

Namespace: CxDemoInABoxRepos
Repository: Java-Webgoat
Repository Url: https://github.com/CxDemoInABoxRepos/Java-Webgoat
CxAST-Project: CxDemoInABoxRepos/Java-Webgoat
CxAST platform scan: 466e73ae-3cc9-415a-8383-b7e20e1af3be
Branch: main
Application: Java-Webgoat
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-400

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 2.2.10.Final

---

References
Advisory
Commit
Issue
Pull request