Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-5403 · ADVISORY
• pivotal.io/security/cve-2020-5403 · WEB

Autres vulnérabilités de io.projectreactor.netty:reactor-netty-http

• CVE-2025-22227MOYENNE 6.1In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client…
• CVE-2023-34062ÉLEVÉE 7.5In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a…
• CVE-2022-31684MOYENNE 4.3Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers m…
• CVE-2020-5404MOYENNE 5.9The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a …