Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gv6-g396-9v4r

Опубликовано: 27 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.7

Описание

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending \r\r\r as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Google Cloud Classic Application Load Balancer, potentially leading to unauthorized access or manipulation of web requests.

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending \r\r\r as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Google Cloud Classic Application Load Balancer, potentially leading to unauthorized access or manipulation of web requests.

EPSS

Процентиль: 10%
0.00036
Низкий

8.7 High

CVSS3

Дефекты

CWE-444

Связанные уязвимости

CVSS3: 8.7
redhat
7 месяцев назад

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Google Cloud Classic Application Load Balancer, potentially leading to unauthorized access or manipulation of web requests.

CVSS3: 8.7
nvd
4 дня назад

A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Google Cloud Classic Application Load Balancer, potentially leading to unauthorized access or manipulation of web requests.

CVSS3: 8.7
debian
4 дня назад

A flaw was found in Undertow. A remote attacker can exploit this vulne ...

EPSS

Процентиль: 10%
0.00036
Низкий

8.7 High

CVSS3

Дефекты

CWE-444