جزئیات آسیب‌پذیری

CVE-2025-12543

Red Hat Data Grid 8Red Hat Fuse 7Red Hat JBoss Enterprise Application Platform 7Red Hat JBoss Enterprise Application Platform Expansion PackRed Hat Process Automation 7Red Hat Single Sign-On 7

Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

CVSS 3.1

9.6بحرانی

شرح رسمی (انگلیسی)

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.

امتیازهای CVSS

امتیاز	نسخه	منبع	بردار
9.6بحرانی	3.1	CVEProject cvelistV5 (CNA) (redhat)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L`
9.6بحرانی	3.1	CVEProject cvelistV5 (CNA) (redhat-SADP)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L`

محصولات آسیب‌پذیر

فروشنده	محصول	نسخه‌ها	منبع
Red Hat	Red Hat Data Grid 8	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Data Grid 8	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Fuse 7	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Fuse 7	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat JBoss Enterprise Application Platform 7	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat JBoss Enterprise Application Platform 7	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Process Automation 7	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Process Automation 7	همه	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Single Sign-On 7	همه	CVEProject cvelistV5 (CNA)

منابع و راهنماها

۲۱

https://access.redhat.com/errata/RHSA-2026:76128 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:76129 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:76130 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:76132 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:76134 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-12543 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2408784 issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-12543.json x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:33372 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:33371 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4915 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4916 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3889 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0383 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4917 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3891 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0384 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4924 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3892 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0386 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3890 vendor-advisoryx_refsource_REDHAT

هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار: ۱۴۰۴/۱۰/۱۷
آخرین به‌روزرسانی: ۱۴۰۵/۰۸/۱۴
وضعیت: منتشرشده
صادرکننده (CNA): redhat

پیش‌بینی بهره‌برداری (EPSS)

۱٫۳۳٪

احتمال بهره‌برداری در ۳۰ روز

۷۱٫۲٪

صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی: خیر
وضعیت بهره‌برداری: اثبات مفهوم
اثر فنی: کامل

ضعف‌ها (CWE)

CWE-20
Improper Input Validation