https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:56:32 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-14151 cnvd-2017-14151 https://cve.radiocsirt.org/vuln/cnvd-2017-14151 https://cve.radiocsirt.org/vuln/euvd-2026-72472 EUVD-2026-72472 https://cve.radiocsirt.org/vuln/euvd-2026-72472 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2666 <p>It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.</p> <p>It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-2666 https://cve.radiocsirt.org/vuln/ghsa-mcfm-h73v-635m <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.</p> <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.</p> https://cve.radiocsirt.org/vuln/ghsa-mcfm-h73v-635m https://cve.radiocsirt.org/vuln/gsd-2017-2666 gsd-2017-2666 https://cve.radiocsirt.org/vuln/gsd-2017-2666 https://cve.radiocsirt.org/vuln/rhsa-2017:1409 <p>Resteasy: Yaml unmarshalling vulnerable to RCE wildfly: Arbitrary file read via path traversal undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests undertow: IO thread DoS via unclean Websocket closing</p> <p>Resteasy: Yaml unmarshalling vulnerable to RCE wildfly: Arbitrary file read via path traversal undertow: HTTP Request smuggling vulnerability due to permitting invalid characters in HTTP requests undertow: IO thread DoS via unclean Websocket closing</p> https://cve.radiocsirt.org/vuln/rhsa-2017:1409 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-2666 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow</p> <p>It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow</p> <p>It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-2666