Lucene search
GitHub Advisory DatabaseGHSA-PP3C-CF6J-M3FFHistoryJun 07, 2022 - 12:00 a.m.
Server-Side Request Forgery in Jodd HTTP
2022-06-0700:00:31
CWE-74
CWE-918
GitHub Advisory Database
github.com
6
0.001 Low
EPSS
Percentile
30.4%
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jodd:jodd-http | ge | 5.0.0 | |
| org.jodd:jodd-http | lt | 6.2.1 |
Related
prion
prion
Server side request forgery (ssrf)
2022-06-06 21:15:00
osv
osv
CVE-2022-29631
2022-06-06 21:15:08
Server-Side Request Forgery in Jodd HTTP
2022-06-07 00:00:31
cvelist
cvelist
CVE-2022-29631
2022-06-06 20:03:03
ubuntucve
ubuntucve
CVE-2022-29631
2022-06-06 00:00:00
debiancve
debiancve
CVE-2022-29631
2022-06-06 21:15:08
veracode
veracode
CRLF Injection
2022-06-07 03:36:56
cve
cve
CVE-2022-29631
2022-06-06 21:15:08