Description

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

Remediation

References

CVE-2020-10719

Related Vulnerabilities

Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12385)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.5)

WordPress 2.3.1 Unauthorized Post Access Vulnerability (2.3.1)

Apache HTTP Server Other Vulnerability (CVE-2003-0987)

WordPress Plugin Simple Matted Thumbnails Cross-Site Scripting (1.01)

Severity

Medium

Classification

CVE-2020-10719 CWE-444 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities