← back
CVE-2020-10719

CVE-2020-10719

CVSS 6.5 MEDIUMEPSS 1.0%CWE-444
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Red Hat · undertow

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10719https://security.netapp.com/advisory/ntap-20220210-0014/