Skip to content
Sign in
4.3 Medium

CVE-2022-31684 Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests

Description

Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.

Affected products and versions

Product Affected versions Fixed in
Reactor Netty Versions not published

Other CVEs of Reactor Netty

The 2 CVEs of Reactor Netty →
CVE-2023-34062 In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can… 7.5 High
Track this CVE