--- Doc Text *updated* by Jonathan Christison <jochrist(a)redhat.com> ---
It was found Netty before 4.1.44 was found to accept headers HTTP headers with an invalid
fold, in this case CRLF (Carriage Return, Line Feed) without being followed by SP(Space)
or HTAB (Horizontal Tab) , this can result in situations where headers can be misread as
it does not follow standards set by RFC7230 section 3.2.
In circumstances where Netty is used in the context of a server it could result in a
viable http smuggling vulnerability.
You are receiving this mail because:
You are on the CC list for the bug.