CVE-2019-10797

EUVD-2022-1184 · Published Feb 9, 2022

HTTP Response Splitting in WSO2 transport-http Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.

Technologies

Wso2 Transport-Http

Weaknesses

NVD-CWE-OtherCWE-113

CVSS scores

v3.16.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Credential Access

T1190Exploit Public-Facing Application T1539Steal Web Session Cookie

References

https://snyk.io/vuln/SNYK-JAVA-ORGWSO2TRANSPORTHTTP-548944
https://nvd.nist.gov/vuln/detail/CVE-2019-10797

Potentially impacted assets

See if this affects your attack surface