Description

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

Remediation

References

CVE-2020-10719

Related Vulnerabilities

Django Improper Input Validation Vulnerability (CVE-2014-0480)

MySQL CVE-2021-35602 Vulnerability (CVE-2021-35602)

Oracle Database Server CVE-2014-6455 Vulnerability (CVE-2014-6455)

WordPress Plugin SendinBlue Subscribe Form And WP SMTP Multiple Unspecified Vulnerabilities (2.7.3)

WordPress Plugin No Page Comment Multiple Vulnerabilities (1.1)

Severity

Medium

Classification

CVE-2020-10719 CWE-444 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities