Undertow bug bounty programs

Undertow programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
UN Undertow Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• UN

  Undertow

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://undertow.io

  Web

• The AJP connector in full, which is how Undertow sits behind mod_cluster and mod_proxy_ajp in real deployments and which trusts more of its input than HTTP does

  Products and areas

• The covered object is the Undertow repository itself, reported to Red Hat product security through the process named in the project's SECURITY.md. Everything in that repository is inside the line; WildFly and JBoss EAP subsystems outside it are not

  Products and areas

• The handler chain itself, which every request passes through before it reaches an application

  Products and areas

• The HTTP server end to end: HTTP/1.1 and HTTP/2 request parsing, the connection and framing layers under them, and the request-smuggling surface between the two protocols

  Products and areas

• The servlet container: path handling, %2f normalisation, the security-constraint matcher and the dispatcher that acts on their result

  Products and areas

• The whole security layer, covering the form-authentication flow and Undertow's native security-context code paths, which decide who a request is running as

  Products and areas

• WebSocket framing and the upgrade handshake

  Products and areas

No target matches. Try part of a host name, such as the company name.