Aller au contenu
en Se connecter
Non notée

CVE-2021-20220 A flaw was found in Undertow

Description

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.

Produits et versions touchés

Produit Versions touchées Corrigé en
Undertow Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Undertow

Les 14 CVE de Undertow →
CVE-2022-4492 The undertow client is not checking the server identity presented by the server certificate in https connections Non notée CVE-2022-2764 A flaw was found in Undertow Non notée CVE-2022-1259 A flaw was found in Undertow Non notée CVE-2022-1319 A flaw was found in Undertow Non notée
Suivre cette CVE