Description
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10719
https://security.netapp.com/advisory/ntap-20220210-0014/
Related Vulnerabilities
CVE-2022-36906 Vulnerability in maven package org.jenkins-ci.plugins:openshift-deployer
CVE-2023-45857 Vulnerability in maven package org.webjars.bower:axios
CVE-2023-34238 Vulnerability in npm package gatsby
CVE-2019-14837 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2023-41578 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-parent