Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final incomplete fix for CVE-2017-2666 allows injection of data into HTTP respons
Reporter | Title | Published | Views | Family All 95 |
---|---|---|---|---|
![]() | HTTP Smuggling | 15 Jun 201702:56 | – | veracode |
![]() | HTTP Smuggling | 5 Mar 201808:39 | – | veracode |
![]() | HTTP Request Smuggling | 18 Aug 202002:03 | – | veracode |
![]() | CVE-2017-7559 | 10 Jan 201815:29 | – | osv |
![]() | UBUNTU-CVE-2017-7559 | 10 Jan 201815:29 | – | osv |
![]() | GHSA-RJ76-H87P-R3WF Undertow vulnerable to Request Smuggling | 13 May 202201:36 | – | osv |
![]() | UBUNTU-CVE-2017-2666 | 27 Jul 201814:29 | – | osv |
![]() | GHSA-MCFM-H73V-635M Undertow-core vulnerable to HTTP Request Smuggling | 19 Oct 201816:55 | – | osv |
![]() | CVE-2017-2666 | 27 Jul 201814:29 | – | osv |
![]() | CVE-2020-10687 | 23 Sep 202013:15 | – | osv |
[
{
"product": "undertow",
"vendor": "Red Hat, Inc.",
"versions": [
{
"status": "affected",
"version": "2.x before 2.0.0.Alpha2"
},
{
"status": "affected",
"version": "1.4.x before 1.4.17.Final"
},
{
"status": "affected",
"version": "1.3.x before 1.3.31.Final"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo