https://bugzilla.redhat.com/show_bug.cgi?id=1591929
--- Comment #5 from Doran Moppert <dmoppert(a)redhat.com> ---
Mitigation:
According to the upstream advisory, this attack applies to applications that
allow the application server to handle HTTP TRACE requests, and use the
HiddenHttpMethodFilter. Note that in the HiddenHttpMethodFilter is enabled by
default in Spring Boot.
--
You are receiving this mail because:
You are on the CC list for the bug.