Aller au contenu
Se connecter
4.3 Moyenne

CVE-2022-31684 Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests

Description

Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.

Produits et versions touchés

Produit Versions touchées Corrigé en
Reactor Netty Versions non publiées

Autres CVE de Reactor Netty

Les 2 CVE de Reactor Netty →
CVE-2023-34062 In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can… 7.5 Élevée
Suivre cette CVE