Read the docs
Red Hat Security Advisory

RHSA-2020:5173

Red Hat JBoss Web Server 5.4 security release

Released 2020-11-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 61

A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.26699 Published 2020-06-26 Partial fix · 10.0.0-M5, 9.0.35 +1 CWE-400