Moderate severityNVD Advisory· Published May 26, 2020· Updated Aug 4, 2024

CVE-2020-10719

Description

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
io.undertow:undertow-coreMaven	< 2.1.1.Final	2.1.1.Final

Affected products

Red Hat/Undertowv5
Range: Versions before 2.1.1.Final

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/advisories/GHSA-cccf-7xw3-p2vrghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-10719ghsaADVISORY
bugzilla.redhat.com/show_bug.cgighsax_refsource_CONFIRMWEB
security.netapp.com/advisory/ntap-20220210-0014ghsaWEB
security.netapp.com/advisory/ntap-20220210-0014/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000