CVE-2020-7238

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a…

published January 27, 2020

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03647 · 89.5th percentile
Published
2020-01-27T16:43Z
EPSS history
Timeline
  • 27 JAN 16:43Z
    Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a…
    cvelistv5