Lucene search
Violeta GeorgievaSPRING:4476A5A719C3A5E774CC8572DD533037HistoryOct 20, 2022 - 12:45 p.m.
CVE-2022-31684: Reactor Netty HTTP Server may log request headers
2022-10-2012:45:00
Violeta Georgieva
spring.io
103
reactor netty
http server
logging
vulnerability
spring webflux
webclient
cve-2022-31684
update
spring boot
reactor bom
0.001 Low
EPSS
Percentile
30.4%
The Reactor Netty 1.0.24 release on October 11 included fix for CVE-2022-31684 affecting Reactor Netty HTTP Server.
Users are encouraged to update as soon as possible.
Reactor Netty is used internally in many frameworks including Spring WebFlux and its WebClient.
If you have a Spring Boot application, you can upgrade to Reactor BOM 2020.0.24.
Related
osv
osv
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
2022-10-20 12:00:17
CVE-2022-31684
2022-10-19 22:15:10
redhatcve
redhatcve
CVE-2022-31684
2022-11-09 14:56:28
prion
prion
Cross site request forgery (csrf)
2022-10-19 22:15:00
github
github
Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens
2022-10-20 12:00:17
cve
cve
CVE-2022-31684
2022-10-19 22:15:10
spring
spring
This Week in Spring - October 25th, 2022
2022-10-24 07:00:00
veracode
veracode
Information Disclosure
2022-10-21 08:04:34
cvelist
cvelist
CVE-2022-31684
2022-10-19 00:00:00
nvd
nvd
CVE-2022-31684
2022-10-19 22:15:10
ibm
ibm
redhat
redhat