{"id":"CVE-2017-7559","published":"2018-01-10T15:00:00Z","modified":"2024-09-16T19:56:46Z","title":"In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the…","vendor":"Red Hat","product":"undertow","tier":"tail","description":{"text":"In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the fix for CVE-2017-2666 was incomplete and invalid characters are still allowed in the query string and path parameters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01911,"percentile":0.79748,"provenance":"source"},"cwes":[{"id":"CWE-444","name":"Inconsistent Interpretation of HTTP Requests"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:1322","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7559","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0002","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3458","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://issues.jboss.org/browse/UNDERTOW-1251","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0004","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3455","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3456","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0003","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0005","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2017:3454","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":15.9,"factors":[{"name":"EPSS percentile","points":15.95}]},"vendorSlug":"red-hat","affectedVersions":[{"vendor":"Red Hat, Inc.","product":"undertow","versions":["2.x before 2.0.0.Alpha2","1.4.x before 1.4.17.Final","1.3.x before 1.3.31.Final"]}],"affected":[{"ecosystem":"Maven","package":"io.undertow:undertow-core","vulnerableRanges":[">=1.4.0, <1.4.17.Final",">=1.3.0, <1.3.31.Final",">=2.0.0.Alpha1, <2.0.0.Alpha2"],"patched":["1.4.17.Final","1.3.31.Final","2.0.0.Alpha2"],"from":["GHSA-rj76-h87p-r3wf"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-5183","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-red-hat-undertow-cve-2016-4993","parents":[{"from":"CVE-2017-2666","to":"CVE-2017-7559","relation":"incomplete-fix","confidence":"high","kind":"lineage","orderedBy":"description","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the fix for CVE-2017-2666 was incomplete and invalid characters are still allowed in the query string and path parameters.","from":"CVE.org","in":"CVE-2017-7559"},{"kind":"similar","provenance":"machine","score":0.76,"basis":"same package + description similarity"}]}],"packageHistory":[{"cve":"CVE-2017-2670","published":"2018-07-27","fixed":"1.3.28","kev":false},{"cve":"CVE-2016-7046","published":"2016-10-03","fixed":"1.4.3.Final","kev":false},{"cve":"CVE-2017-2666","published":"2018-07-27","fixed":"1.4.17","kev":false},{"cve":"CVE-2017-7559","published":"2018-01-10","fixed":"2.0.0.Alpha2","kev":false},{"cve":"CVE-2017-12165","published":"2018-07-27","fixed":"2.0.0.Beta1","kev":false,"link":{"from":"CVE-2017-7559","to":"CVE-2017-12165","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:io.undertow:undertow-core","fromFixed":"2.0.0.Alpha2","toFixed":"2.0.0.Beta1","daysApart":198}]}},{"cve":"CVE-2017-12196","published":"2018-04-18","fixed":"2.0.2.FInal","kev":false,"link":{"from":"CVE-2017-7559","to":"CVE-2017-12196","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:io.undertow:undertow-core","fromFixed":"1.4.17.Final","toFixed":"1.4.24.Final","daysApart":98}]}},{"cve":"CVE-2018-1114","published":"2018-09-11","fixed":"2.0.5.Final","kev":false}],"package":"Maven:io.undertow:undertow-core"}}