CVE-2019-10797
HTTP Response Splitting in WSO2 transport-http
Summary
HTTP Response Splitting in WSO2 transport-http
Original description
The description as published by the source.
Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Maven
org.wso2.transport.http:org.wso2.transport.http.netty
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.1"}]}]
References
- advisory nvd.nist.gov
- web snyk.io