CVE-2020-1710

2020-09-1614:28:20

redhat

www.cve.org

jboss eap

parsing issue

rfc7230

http status code

cve-2020-1710

AI Score

Confidence

High

EPSS

0.001

Percentile

35.9%

JSON

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.

CNA Affected

[
  {
    "product": "JBoss Enterprise Application Platform",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EAP 6.4.21"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1793970