by Kastro CVE-2025-12543
Red Hat Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11 — Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf
Description · from the CVE record
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.
Affected
ProductAffectedFixed inSource
Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11see advisory–CNA
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7see advisory0:1.4.18-21.SP19_redhat_00001.1.ep7.el7CNA
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7see advisory0:2.0.41-8.SP9_redhat_00001.1.el7eapCNA
Red Hat JBoss Enterprise Application Platform 7.4.24see advisory2.2.39.Final-redhat-00001CNA
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7see advisory0:2.2.39-1.Final_redhat_00001.1.el7eapCNA
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7see advisory0:7.4.24-4.GA_redhat_00002.1.el7eapCNA
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8see advisory0:2.2.39-1.Final_redhat_00001.1.el8eapCNA
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8see advisory0:7.4.24-4.GA_redhat_00002.1.el8eapCNA
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9see advisory0:2.2.39-1.Final_redhat_00001.1.el9eapCNA
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9see advisory0:7.4.24-4.GA_redhat_00002.1.el9eapCNA
Red Hat JBoss Enterprise Application Platform 8.0see advisory–CNA
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8see advisory0:1.83.0-1.redhat_00001.1.el8eapCNA
Scores by source
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
redhat (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
redhat-SADP (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total