Jodd HTTP vulnerabilities

1 known vulnerability in Jodd HTTP from Jodd. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Jodd HTTP: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2022-29631Jun 6, 2022JoddEPSS 1%

  Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted T