Jboss EAP Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Vulnerability - CVE-2019-20444 - Vulnerability Database

Jboss EAP

Jboss EAP Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Vulnerability - CVE-2019-20444

Critical

Reference: CVE-2019-20444

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-20444

Title: Jboss EAP Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Vulnerability

Overview:

HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon which might be interpreted as a separate header with an incorrect syntax or might be interpreted as an quotinvalid fold.quot