Jboss EAP Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Vulnerability - CVE-2017-7561 - Vulnerability Database

Jboss EAP

Jboss EAP Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Vulnerability - CVE-2017-7561

High

Reference: CVE-2017-7561

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-7561

Title: Jboss EAP Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Vulnerability

Overview:

Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component resulting in a moderate impact.