HTTP Request Smuggling Vulnerability in Undertow by Red Hat

CVE-2017-12165

What is CVE-2017-12165?

This vulnerability exists in Undertow, where improper handling of HTTP request headers with irregular whitespace could lead to HTTP request smuggling attacks. Attackers may exploit this issue to manipulate request parsing, potentially allowing unauthorized access or other malicious activities. It is crucial to update to the latest versions of Undertow to mitigate these risks.

References