Search for packages
| purl | pkg:maven/io.undertow/undertow-core@1.3.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-bu59-sqtv-aaak
Aliases: CVE-2017-7559 GHSA-rj76-h87p-r3wf |
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Invalid characters are allowed in query strings and path parameters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own. |
Affected by 35 other vulnerabilities. Affected by 36 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 35 other vulnerabilities. Affected by 35 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-01-17T02:30:53.327643+00:00 | GHSA Importer | Affected by | VCID-bu59-sqtv-aaak | None | 35.1.0 |
| 2024-09-17T22:37:08.625887+00:00 | GitLab Importer | Affected by | VCID-bu59-sqtv-aaak | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2017-7559.yml | 34.0.1 |
| 2024-09-17T22:04:04.825959+00:00 | GHSA Importer | Affected by | VCID-bu59-sqtv-aaak | https://github.com/advisories/GHSA-rj76-h87p-r3wf | 34.0.1 |
| 2024-01-03T18:00:08.720175+00:00 | GitLab Importer | Affected by | VCID-bu59-sqtv-aaak | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.undertow/undertow-core/CVE-2017-7559.yml | 34.0.0rc1 |
| 2024-01-03T17:38:48.880306+00:00 | GHSA Importer | Affected by | VCID-bu59-sqtv-aaak | https://github.com/advisories/GHSA-rj76-h87p-r3wf | 34.0.0rc1 |