VULNERABILITY INTELLIGENCE

CVE-2017-12165

CVSS score2.6 LOW
EPSS probability1.86%
CISA KEVNot currently listed
Published2018-07-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

Description

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.

Weakness classification

  • CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Primary references