Description

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.

Remediation

References

CVE-2017-12165

Related Vulnerabilities

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15695)

MySQL CVE-2024-21196 Vulnerability (CVE-2024-21196)

WordPress Plugin SI CAPTCHA Anti-Spam Cross-Site Scripting (2.7.5)

WordPress Plugin Booked-Appointment Booking for WordPress Security Bypass (2.2.5)

WordPress Plugin Profile Builder Pro Security Bypass (3.1.0)

Severity

High

Classification

CVE-2017-12165 CWE-444 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities