CVE-2020-7238
netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.
CVSS 3.1 · 7.5 High
EPSS 3.5%
KEV · Not listed
Vendors
Products