Red Hat Jboss Amq Clients vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat Jboss Amq Clients: 2 record(s), with affected versions and fixes.cpe:2.3:a:redhat:jboss_amq_clients
CVE-2019-20445
Critical · 9.1
CWE-444 Jan 29, 2020
HTTP Request Smuggling in Netty
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
CVE-2019-20444
Critical · 9.1
CWE-444 Jan 29, 2020
HTTP Request Smuggling in Netty
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."