Description
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Remediation
References
Related Vulnerabilities
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.9)
WordPress 4.4.x Cross-Domain Flash Injection Vulnerability (4.4 - 4.4.13)
MySQL CVE-2020-14845 Vulnerability (CVE-2020-14845)
Oracle JRE CVE-2013-5801 Vulnerability (CVE-2013-5801)
WeBid Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-47397)