CVE-2022-29631

Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-06-06

Last modified

2024-08-03

Weaknesses

CWE-74

Affected products

• Jodd Http (Jodd)

References

• https://github.com/oblac/jodd-http/issues/9
• https://github.com/oblac/jodd/issues/787