GitHub Advisoryadvisory · Maven

GHSA-cccf-7xw3-p2vr HTTP Request Smuggling in Undertow

MEDIUM Published 2021-04-30 Modified 2022-02-11 Official page ↗
Aliases
CVE-2020-10719
Ecosystem
Maven
Packages
io.undertow:undertow-core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-444
Reviewed
2021-04-28

Affected packages

• Maven io.undertow:undertow-core: < 2.1.1.Final → fixed in 2.1.1.Final

Description

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

Related

Alias · CVE (1)

  • CVE-2020-10719 A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. vulnerability

Weakness · CWE (1)

  • CWE-444 Inconsistent Interpretation of HTTP Requests weakness

References