6.1
Moyenne
CVE-2026-47848 In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket…
Description
In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Reactor Netty 1.3 | 1.3.0 → 1.3.6 | Pas de correctif indiqué |
| Reactor Netty 1.1 | 1.1.0 → 1.2.18 | Pas de correctif indiqué |
| Reactor Netty 1.0 | premières → 1.0.52 | Pas de correctif indiqué |
Références
- spring.io spring.io
Chronologie
- Publiée
- Dernière modification
Autres CVE de Reactor Netty
Les 7 CVE de Reactor Netty →
CVE-2026-47874
The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor…
5.3
Moyenne
CVE-2026-47845
In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is…
5.3
Moyenne
CVE-2026-47844
In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests
5.3
Moyenne
CVE-2026-47843
In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may…
3.7
Faible