Lack of data validation In org.wso2.transport.http:org.wso2.transport.http.netty
Description
HTTP Response Splitting in WSO2 transport-http Netty in WSO2 transport-http before v6.3.1 is vulnerable to HTTP Response Splitting due to HTTP Header validation being disabled.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 maven | 6.3.1 |
Aliases
1. 2. 3. 4.