THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-9784 (HIGH 7.5) — A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-si

[NVD] CVE-2025-9784 (HIGH 7.5) — A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-si

lownvdPublished 2025-09-02

CVE-2025-9784 CVSS: 7.5 HIGH Published: 2025-09-02T14:15:36.593

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highli

Indicators of compromise

CVE-2025-9784cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-9784