CVE-2019-10797

Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled

published February 19, 2020

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01260 · 69.4th percentile
Published
2020-02-19T18:14Z
EPSS history
Timeline
  • 19 FEB 18:14Z
    Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled
    cvelistv5