CVE-2022-41915

creationtimestamp| type| source ---|---|--- 2022-12-13 12:35:29+00:00| seen| https://t.me/cibsecurity/54384...

CVE-2022-41915 vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2022-41915 vulnerabilities

Vulnerabilities for packages: apache-nifi...

CVE-2022-41915

CVE-2022-41915 (Netty) : Netty versions 4.1.83.Final through 4.1.85.Final are affected. When calling DefaultHttpHeaders.set with an Iterator, header value validation was not performed, enabling HTTP Response Splitting via malicious iterator values. This is patched in 4.1.86.Final. Remediation/wor...

CVE-2022-41915

Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling DefaultHttpHeadesr.set with an iterator of values, header value validation was not performed, allowing malicious header values in the iterator to...