#jvm

4 pages tagged with "jvm"

infosec

chunkloris: Spring Boot + Tomcat — HTTP/1.1 chunked transfer encoding. Spring Boot + Tomcat spring-boot-3.3.5 / tomcat-10.1. verdict: vulnerable per chunk.
chunkloris: Spring Boot + Tomcat (h2c) — HTTP/2 (h2c) DATA frames. Spring Boot + Tomcat (h2c) spring-boot-3.3.5 / tomcat-10.1. verdict: protected h2 goaway.
chunkloris: Vert.x — HTTP/1.1 chunked transfer encoding. Vert.x 4.5.10. verdict: vulnerable per chunk.
chunkloris: Vert.x 4.5 (Netty h2c) — HTTP/2 (h2c) DATA frames. Vert.x 4.5 (Netty h2c) 4.5.10. verdict: batches correctly.