CVE-2020-10687
CVE-2020-10687
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 1.1%KEV nãoPoC —Patch —
Ciclo de vida
23 de set. de 2020Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own.
Produtos afetados
n/a · UndertowQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →