Pivotal Reactor Netty
3 CVEs affecting Pivotal Reactor Netty. Latest disclosed: 2020-03-03. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11284 | High | 8.6 | 2019-10-17 | Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may ga… |
CVE-2020-5403 | High | 7.5 | 2020-03-03 | Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing… |
CVE-2020-5404 | Medium | 5.9 | 2020-03-03 | The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak du… |