https://bugzilla.redhat.com/show_bug.cgi?id=1798524
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to
version 4.1.44. HTTP headers with an invalid fold, in this case CRLF (carriage return,
line feed) without being followed by SP (space) or HTAB (horizontal tab), result in
situations where headers can be misread. Data integrity is the highest threat with this
vulnerability.
--
You are receiving this mail because:
You are on the CC list for the bug.