The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1793970 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2020-09-16 08:15
Updated : 2020-09-22 13:20
NVD link : CVE-2020-1710
Mitre link : CVE-2020-1710
JSON object : View
CWE
Products Affected
redhat
- openshift_application_runtimes
- single_sign-on
- jboss_data_grid
- jboss_enterprise_application_platform