11 matches found
io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2
A flaw was found in Netty's netty-codec-http2 component. The HTTP/2 encoder does not properly handle special characters in HTTP headers. This vulnerability allows a remote attacker to craft specific HTTP/2 requests, leading to HTTP response splitting and header injection attacks. Such attacks can...
6.9CVSS5.8AI score0.00232EPSS
SaveExploits0References7
20