Description

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.

Remediation

References

CVE-2017-12165

Related Vulnerabilities

Squid Out-of-bounds Write Vulnerability (CVE-2019-12527)

WordPress Plugin EDD Favorites Cross-Site Scripting (1.0.6)

Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2024-25605)

OpenSSL Numeric Errors Vulnerability (CVE-2012-2131)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-35615)

Severity

High

Classification

CVE-2017-12165 CWE-444 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities