Lucene search
PRIOn knowledge basePRION:CVE-2022-31684HistoryOct 19, 2022 - 10:15 p.m.
Cross site request forgery (csrf)
2022-10-1922:15:00
PRIOn knowledge base
www.prio-n.com
6
cross site request forgery
netty http server
access tokens
server logs
Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| reactor_netty | ge | 1.0.11 | |
| reactor_netty | le | 1.0.23 |
References
Related
osv
osv
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
2022-10-20 12:00:17
CVE-2022-31684
2022-10-19 22:15:10
redhatcve
redhatcve
CVE-2022-31684
2022-11-09 14:56:28
github
github
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
2022-10-20 12:00:17
spring
spring
CVE-2022-31684: Reactor Netty HTTP Server may log request headers
2022-10-20 12:45:00
This Week in Spring - October 25th, 2022
2022-10-24 07:00:00
nvd
nvd
CVE-2022-31684
2022-10-19 22:15:10
veracode
veracode
Information Disclosure
2022-10-21 08:04:34
cve
cve
CVE-2022-31684
2022-10-19 22:15:10
cvelist
cvelist
CVE-2022-31684
2022-10-19 00:00:00
ibm
ibm
redhat
redhat