CVE-2019-10797
HTTP Response Splitting in WSO2 transport-http
Résumé
HTTP Response Splitting in WSO2 transport-http
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Maven
org.wso2.transport.http:org.wso2.transport.http.netty
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.1"}]}]
Références
- advisory nvd.nist.gov
- web snyk.io