https://bugzilla.redhat.com/show_bug.cgi?id=1798509
--- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> ---
A flaw was found in Netty before version 4.1.44, where it accepted multiple Content-Length
headers and also accepted both Transfer-Encoding, as well as Content-Length headers where
it should reject the message under such circumstances. In circumstances where Netty is
used in the context of a server, it could result in a viable HTTP smuggling
vulnerability.
--
You are receiving this mail because:
You are on the CC list for the bug.