Moderate severityNVD Advisory· Published May 26, 2020· Updated Aug 4, 2024

CVE-2020-10719

Description

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
io.undertow:undertow-coreMaven	< 2.1.1.Final	2.1.1.Final

Affected products

ghsa-coords
pkg:maven/io.undertow/undertow-core
Range: < 2.1.1.Final
Red Hat/Undertowv5
Range: Versions before 2.1.1.Final

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-cccf-7xw3-p2vrghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-10719ghsaADVISORY
bugzilla.redhat.com/show_bug.cgighsax_refsource_CONFIRMWEB
security.netapp.com/advisory/ntap-20220210-0014ghsaWEB
security.netapp.com/advisory/ntap-20220210-0014/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000