Medium · 6.5 CVE-2019-10797 EUVD-2022-1184GHSA-rvpc-w57p-q95fSNYK-JAVA-ORGWSO2TRANSPORTHTTP-548944

HTTP Response Splitting in WSO2 transport-http

Published Feb 19, 2020 · Updated Aug 4, 2024 · Assigned by snyk

Description

Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.

Vendor	Product	Affected	Fixed
Snyk	WSO2 transport-http	All versions prior to version v6.3.1	—

Ecosystem	Package	Affected	Fixed	Record
Maven	org.wso2.transport.http:org.wso2.transport.http.netty	< 6.3.1	6.3.1	GHSA-rvpc-w57p-q95f