Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2016-4993

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qcqr-hcjq-whfq

Improper Neutralization of CRLF Sequences in Wildfly Undertow CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

gitlab/maven/io.undertow/undertow-core/CVE-2016-4993

Improper Neutralization of CRLF Sequences in HTTP Headers CRLF injection vulnerability in the Undertow web server allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

gitlab/maven/org.wildfly/wildfly-undertow/CVE-2016-4993

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.