Lucene search
Redhat.comRH:CVE-2020-10687HistoryApr 15, 2020 - 6:00 a.m.
CVE-2020-10687
2020-04-1506:00:02
redhat.com
access.redhat.com
18
EPSS
0.006
Percentile
78.4%
A flaw was discovered in Undertow where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own.
Related
veracode
veracode
HTTP Request Smuggling
2020-08-18 02:03:52
HTTP Smuggling
2018-03-05 08:39:59
HTTP Smuggling
2017-06-15 02:56:23
cvelist
cvelist
debiancve
debiancve
osv
osv
HTTP Request Smuggling in Undertow
2021-04-30 17:28:52
CVE-2020-10687
2020-09-23 13:15:15
HTTP request smuggling in Undertow
2021-06-16 17:47:52
nvd
nvd
github
github
HTTP Request Smuggling in Undertow
2021-04-30 17:28:52
HTTP request smuggling in Undertow
2021-06-16 17:47:52
Undertow-core vulnerable to HTTP Request Smuggling
2018-10-19 16:55:14
cve
cve
ubuntucve
ubuntucve
prion
prion
Design/Logic Flaw
2020-09-23 13:15:00
Design/Logic Flaw
2021-02-23 18:15:00
Design/Logic Flaw
2018-07-27 14:29:00
redhatcve
redhatcve
openvas
openvas
Debian Security Advisory DSA 3906-1 (undertow - security update)
2017-07-11 00:00:00
Debian: Security Advisory (DSA-3906-1)
2017-07-10 00:00:00
nessus
nessus
Debian DSA-3906-1 : undertow - security update
2017-07-12 00:00:00
RHEL 6 : JBoss EAP (RHSA-2017:1410)
2018-09-04 00:00:00
RHEL 6 / 7 : eap7-jboss-ec2-eap (RHSA-2017:1412)
2018-08-29 00:00:00
debian
debian
[SECURITY] [DSA 3906-1] undertow security update
2017-07-11 21:23:40
redhat
redhat