Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8v4x-mgvp-p658

Опубликовано: 27 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.7

Описание

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exploited to launch request smuggling attacks, potentially bypassing security controls and accessing unauthorized resources.

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exploited to launch request smuggling attacks, potentially bypassing security controls and accessing unauthorized resources.

EPSS

Процентиль: 26%
0.00095
Низкий

8.7 High

CVSS3

Дефекты

CWE-444

Связанные уязвимости

CVSS3: 8.7
redhat
7 месяцев назад

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exploited to launch request smuggling attacks, potentially bypassing security controls and accessing unauthorized resources.

CVSS3: 8.7
nvd
4 дня назад

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exploited to launch request smuggling attacks, potentially bypassing security controls and accessing unauthorized resources.

CVSS3: 8.7
debian
4 дня назад

A flaw was found in Undertow. This vulnerability allows a remote attac ...

EPSS

Процентиль: 26%
0.00095
Низкий

8.7 High

CVSS3

Дефекты

CWE-444