CVE-2017-12165CWE-444

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request…

Low · published July 27, 2018

CVSS v3.0
2.6
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.

The record
Technical detail
CVSS v3.0
2.6 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01858 · 79.1th percentile
Weakness
CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published
2018-07-27T15:00Z
EPSS history
Timeline
  • 27 JUL 15:00Z
    It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request…
    cvelistv5