Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22411
HistoryJan 31, 2020 - 12:35 a.m.

HTTP Request Smuggling

2020-01-3100:35:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
34

0.012 Low

EPSS

Percentile

85.6%

netty-codec-http is vulnerable to HTTP request smuggling. The vulnerability exists as it improperly handles whitespaces in the Transfer-Encoding, and the Content-Length headers. This vulnerability is caused by an incomplete fix for CVE-2019-16869.

References