#jvm
4pages tagged with "jvm"
infosec
- chunkloris: Spring Boot + Tomcat— HTTP/1.1 chunked transfer encoding. Spring Boot + Tomcat spring-boot-3.3.5 / tomcat-10.1. verdict: vulnerable per chunk.
- chunkloris: Spring Boot + Tomcat (h2c)— HTTP/2 (h2c) DATA frames. Spring Boot + Tomcat (h2c) spring-boot-3.3.5 / tomcat-10.1. verdict: protected h2 goaway.
- chunkloris: Vert.x— HTTP/1.1 chunked transfer encoding. Vert.x 4.5.10. verdict: vulnerable per chunk.
- chunkloris: Vert.x 4.5 (Netty h2c)— HTTP/2 (h2c) DATA frames. Vert.x 4.5 (Netty h2c) 4.5.10. verdict: batches correctly.