Can anyone point me at a reference that covers if Undertow's AJP listener is susceptible to the newly-released Ghostcat vulnerability. Most information centers around Tomcat, but Redhat does have this page mentioning Undertow.
However, even the information there seems to revolve around Undertow as it's embedded in EAP 7 and not Undertow when embedded directly in an application like I use it.
Is Undertow proper vulnerable? What versions? I see a generic ticket mentioning Undertow here
but I can't find any tickets on the Undertow JIRA ticket tracker
Thanks!
~Brad
Developer Advocate
Ortus Solutions, Corp