Undertow HTTP Request HTTP/1.x request smuggling

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Undertow (the affected version unknown). It has been classified as critical. This affects an unknown part of the file HTTP/1.x of the component HTTP Request Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10965538	02/23/2021	VulD...	price_0day	$0-$5k	see documentation	02/23/2021	accepted	90
10965537	02/23/2021	VulD...	cvss3_meta_tempscore	5.5	see documentation	02/23/2021	accepted	90
10965536	02/23/2021	VulD...	cvss3_meta_basescore	5.5	see documentation	02/23/2021	accepted	90
10965535	02/23/2021	VulD...	cvss3_vuldb_tempscore	5.5		02/23/2021	accepted	90
10965534	02/23/2021	VulD...	cvss3_vuldb_basescore	5.5		02/23/2021	accepted	90
10965533	02/23/2021	VulD...	cvss2_vuldb_tempscore	5.2		02/23/2021	accepted	90
10965532	02/23/2021	VulD...	cvss2_vuldb_basescore	5.2		02/23/2021	accepted	90
10965531	02/23/2021	VulD...	cvss3_vuldb_rl	X	derived from historical data	02/23/2021	accepted	80
10965530	02/23/2021	VulD...	cvss3_vuldb_e	X	derived from historical data	02/23/2021	accepted	80
10965529	02/23/2021	VulD...	cvss3_vuldb_pr	L	derived from historical data	02/23/2021	accepted	80
10965528	02/23/2021	VulD...	cvss3_vuldb_av	A	derived from historical data	02/23/2021	accepted	80
10965527	02/23/2021	VulD...	cvss2_vuldb_rl	ND	derived from historical data	02/23/2021	accepted	80
10965526	02/23/2021	VulD...	cvss2_vuldb_e	ND	derived from historical data	02/23/2021	accepted	80
10965525	02/23/2021	VulD...	cvss2_vuldb_au	S	derived from historical data	02/23/2021	accepted	80
10965524	02/23/2021	VulD...	cvss2_vuldb_av	A	derived from historical data	02/23/2021	accepted	80
10965523	02/23/2021	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	02/23/2021	accepted	80
10965522	02/23/2021	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	02/23/2021	accepted	80
10965521	02/23/2021	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	02/23/2021	accepted	80
10965520	02/23/2021	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	02/23/2021	accepted	80
10965519	02/23/2021	VulD...	cvss2_vuldb_ac	L	derived from vuldb v3 vector	02/23/2021	accepted	80