Lucene search
PRIOn knowledge basePRION:CVE-2021-20220HistoryFeb 23, 2021 - 6:15 p.m.
Design/Logic Flaw
2021-02-2318:15:00
PRIOn knowledge base
www.prio-n.com
11
A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity.
Related
ubuntucve
ubuntucve
nvd
nvd
debiancve
debiancve
cve
cve
osv
osv
CVE-2021-20220
2021-02-23 18:15:13
HTTP request smuggling in Undertow
2021-06-16 17:47:52
HTTP Request Smuggling in Undertow
2021-04-30 17:28:52
github
github
HTTP request smuggling in Undertow
2021-06-16 17:47:52
HTTP Request Smuggling in Undertow
2021-04-30 17:28:52
Undertow-core vulnerable to HTTP Request Smuggling
2018-10-19 16:55:14
redhatcve
redhatcve
cvelist
cvelist
veracode
veracode
HTTP Request Smuggling
2020-08-18 02:03:52
HTTP Smuggling
2018-03-05 08:39:59
HTTP Smuggling
2017-06-15 02:56:23
prion
prion
Design/Logic Flaw
2020-09-23 13:15:00
Design/Logic Flaw
2018-07-27 14:29:00
Design/Logic Flaw
2018-01-10 15:29:00
nessus
nessus
redhat
redhat
openvas
openvas
Debian Security Advisory DSA 3906-1 (undertow - security update)
2017-07-11 00:00:00
Debian: Security Advisory (DSA-3906-1)
2017-07-10 00:00:00
debian
debian
[SECURITY] [DSA 3906-1] undertow security update
2017-07-11 21:23:40