Vulnerability in Undertow Affects Multiple Versions by Red Hat

CVE-2017-7559

Summary

In specific versions of Undertow, a flaw exists due to inadequate validation of query string and path parameters. This allows for the injection of invalid characters which can be exploited with a proxy that interprets these characters differently. Such an exploit may lead to data being injected into HTTP responses, enabling attackers to poison web caches, execute XSS attacks, or extract sensitive information from other users' requests.

References