CVE-2017-7559
1 advisory.
Maven/io.undertow:undertow-core CVE-2017-7559: medium 6.1
Undertow vulnerable to Request Smuggling
Action: Upgrade io.undertow:undertow-core to 1.3.31.Final (1.3.x), 1.4.17.Final (1.4.x) or 2.0.0.Alpha2 (2.0.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.4.17.Final | - |
| 1.3.0 | 1.3.31.Final | - |
| 2.0.0.Alpha1 | 2.0.0.Alpha2 | - |
Fixed versions
| 1.4.17.Final | 1.3.31.Final | 2.0.0.Alpha2 |
Sources
- osv: GHSA-rj76-h87p-r3wf
- https://nvd.nist.gov/vuln/detail/CVE-2017-7559
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7559
- https://github.com/undertow-io/undertow
- https://issues.jboss.org/browse/UNDERTOW-1251
CVE-2017-7559 · published · modified · JSON