Description

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

Remediation

References

CVE-2020-10719

Related Vulnerabilities

WordPress Plugin WooCommerce Amazon Affiliates Multiple Vulnerabilities (8.0)

MySQL CVE-2012-0487 Vulnerability (CVE-2012-0487)

Drupal Core 8.8.x Arbitrary File Overwrite (8.8.0 - 8.8.12)

Oracle Application Server CVE-2008-1812 Vulnerability (CVE-2008-1812)

WordPress Plugin Image Optimizer by 10web-Image Optimizer and Compression Multiple Vulnerabilities (1.0.26)

Severity

Medium

Classification

CVE-2020-10719 CWE-444 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities