CVE-2020-10687
CVE-2020-10687
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.1%KEV nãoPoC —Patch —
Ciclo de vida
23 sep 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own.
Productos afectados
n/a · Undertow¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →