Lucene search

K
osvGoogleOSV:GHSA-P2V9-G2QV-P635
HistoryFeb 21, 2020 - 6:55 p.m.

HTTP Request Smuggling in Netty

2020-02-2118:55:04
Google
osv.dev
20

EPSS

0.002

Percentile

55.1%

HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

References