~ / search / GHSA-rvpc-w57p-q95f

GHSA-rvpc-w57p-q95f

HTTP Response Splitting in WSO2 transport-http

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-10797

Packages

EcosystemPackageAffectedFixed in
Maven org.wso2.transport.http:org.wso2.transport.http.netty < 6.3.1 6.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.

References

External links from the advisory. They lead to third-party sites.