Description
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload.
Remediation
References
https://github.com/oblac/jodd-http/issues/9
https://github.com/oblac/jodd/issues/787
Related Vulnerabilities
CVE-2020-7793 Vulnerability in maven package org.webjars.bowergithub.faisalman:ua-parser-js
CVE-2023-33246 Vulnerability in maven package org.apache.rocketmq:rocketmq-controller
CVE-2022-31150 Vulnerability in maven package org.webjars.npm:undici
CVE-2022-22965 Vulnerability in maven package org.springframework:spring-beans
CVE-2021-29479 Vulnerability in maven package io.ratpack:ratpack-core