Description
Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response.
Remediation
References
https://pivotal.io/security/cve-2020-5403
Related Vulnerabilities
CVE-2020-1954 Vulnerability in maven package org.apache.cxf:cxf-rt-management
CVE-2021-26920 Vulnerability in maven package org.apache.druid:druid-core
CVE-2021-21165 Vulnerability in maven package org.webjars.npm:electron
CVE-2023-29201 Vulnerability in maven package org.xwiki.commons:xwiki-commons-xml
CVE-2020-2217 Vulnerability in maven package org.jenkins-ci.plugins:compatibility-action-storage