oblac/jodd-http

Releases13

Frequency1 month 3 weeks

Last Release almost 4 years ago

Stars30

Simple Java HTTP client.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-29631 ↗	Jun 6, 2022Monday, 6 June 2022, 21:15	7.5 HIGH	5 MEDIUM
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload.