Description
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
Published: 2020-05-26
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2021-0812 A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
Github GHSA Github GHSA GHSA-cccf-7xw3-p2vr HTTP Request Smuggling in Undertow
History

No history.

Subscriptions

Netapp Active Iq Unified Manager Oncommand Insight Oncommand Workflow Automation
Redhat Enterprise Linux Fuse Jboss Enterprise Application Platform Jboss Enterprise Application Platform Cd Jboss Fuse Jboss Single Sign On Openshift Application Runtimes Single Sign-on Undertow
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-04T11:14:14.887Z

Reserved: 2020-03-20T00:00:00.000Z

Link: CVE-2020-10719

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-05-26T16:15:12.180

Modified: 2024-11-21T04:55:55.363

Link: CVE-2020-10719

cve-icon Redhat

Severity : Moderate

Publid Date: 2020-05-06T00:00:00Z

Links: CVE-2020-10719 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses