high7.5
CVE-2020-5403
Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty
Impact
Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.projectreactor.netty:reactor-netty-http | >= 0.9.3, <= 0.9.4 | 0.9.5 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Reactor Netty | Versions 0.9.3, 0.9.4 |