Description (CNA)
All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / io.micronaut:micronaut-http-client | affected all versions before 1.2.11; affected all versions from 1.3.0 before 1.3.2 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-JAVA-IOMICRONAUT-561342
- https://github.com/micronaut-projects/micronaut-core/security/advisories/GHSA-694p-xrhg-x3wm
- https://github.com/micronaut-projects/micronaut-core/commit/9d1eff5c8df1d6cda1fe00ef046729b2a6abe7f1
ADP enrichment
No English description supplied.