https://bugzilla.redhat.com/show_bug.cgi?id=1944888
--- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> ---
A flaw was found in Netty. There is an issue where the content-length header is not
validated correctly if the request uses a single Http2HeaderFrame with the endstream set
to true. This flaw leads to request smuggling if the request is proxied to a remote peer
and translated to HTTP/1.1. The highest threat from this vulnerability is to integrity.
--
You are receiving this mail because:
You are on the CC list for the bug.