Description
Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.
Remediation
References
https://snyk.io/vuln/SNYK-JAVA-ORGWSO2TRANSPORTHTTP-548944
Related Vulnerabilities
CVE-2021-26544 Vulnerability in maven package org.apache.livy:livy-server
CVE-2023-26136 Vulnerability in npm package tough-cookie
CVE-2023-25571 Vulnerability in npm package @backstage/catalog-model
CVE-2021-31405 Vulnerability in maven package com.vaadin:vaadin-text-field-flow
CVE-2021-23337 Vulnerability in maven package org.webjars.npm:lodash