CVE-2025-12543 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly vali…
Critical CVSS: 9.6

CVE-2025-12543

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.
Vendor
Redhat
Product
Build Of Apache Camel
CWE
CWE-20
Yayın Tarihi
2026-01-07 17:15:55
Güncelleme
2026-03-18 16:16:22
Source Identifier
secalert@redhat.com
KEV Date Added
-

Kategoriler

CWE-20 Build Of Apache Camel CRITICAL Redhat 2026

Referanslar

https://access.redhat.com/errata/RHSA-2026:0383 https://access.redhat.com/errata/RHSA-2026:0384 https://access.redhat.com/errata/RHSA-2026:0386 https://access.redhat.com/errata/RHSA-2026:3889 https://access.redhat.com/errata/RHSA-2026:3890 https://access.redhat.com/errata/RHSA-2026:3891 https://access.redhat.com/errata/RHSA-2026:3892 https://access.redhat.com/errata/RHSA-2026:4915 https://access.redhat.com/errata/RHSA-2026:4916 https://access.redhat.com/errata/RHSA-2026:4917 https://access.redhat.com/errata/RHSA-2026:4924 https://access.redhat.com/security/cve/CVE-2025-12543 https://bugzilla.redhat.com/show_bug.cgi?id=2408784