CVE-2020-10719

undertow: invalid HTTP request with large chunk size

Published May 26, 2020 CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed
Description
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-0812 A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
Github GHSA Github GHSA GHSA-cccf-7xw3-p2vr HTTP Request Smuggling in Undertow
History

No history.