CVE-2020-10719
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Summary
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | undertow | Versions before 2.1.1.Final | affected |
Weaknesses
- CWE-444: CWE-444
ADP Enrichment
CVE Program Container
Additional References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10719
- https://security.netapp.com/advisory/ntap-20220210-0014/
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10719
- https://security.netapp.com/advisory/ntap-20220210-0014/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.