CVE-2020-10719

Description

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.167

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-10705,CVE-2020-10719 are fixed in Undertow-core 2.1.1	Windows
Multiple Vulnerabilities are affected in Netapp Active Iq Unified Manager 2.3	Windows
Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 7.4	Windows
Multiple Vulnerabilities are affected in Netapp Oncommand Workflow Automation 2.3	Windows
Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 7.2	Windows
Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 7.3	Windows
Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 2.3	Windows
Vulnerabilities CVE-2020-10719 are affected in Netapp Oncommand Insight 7.3.12	Windows
Vulnerabilities CVE-2020-10705,CVE-2020-10719 are fixed in Undertow-core for Linux 2.1.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234