Threats tagged 'ghsa-77qf-r755-9gcw'

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final contain a vulnerability in the validation of the final transfer coding in the Transfer-Encoding header. This flaw allows attackers to craft malformed encoding declarations to bypass validation and perform HTTP request smuggling attacks by manipulating Transfer-Encoding headers. The vulnerability has a medium severity with a CVSS score of 6.5. No official patch or remediation information is provided in the available data.