Description
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
Remediation
References
Related Vulnerabilities
WebLogic Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2021-27568)
PostgreSQL Numeric Errors Vulnerability (CVE-2010-4015)
Drupal Core 9.2.x Security Bypass (9.2.0 - 9.2.17)
WordPress Plugin Social Sharing Toolkit Cross-Site Scripting (2.6)
PostgreSQL Missing Authorization Vulnerability (CVE-2020-1720)