GHSA-cccf-7xw3-p2vr
HTTP Request Smuggling in Undertow
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | io.undertow:undertow-core | < 2.1.1.Final | 2.1.1.Final |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
References
External links from the advisory. They lead to third-party sites.