oblac/jodd-http
GitHub
Releases13
Frequency1 month 3 weeks
Last Release
Stars30
Simple Java HTTP client.
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| >= 5.0, < 6.2.1 | 7.5 HIGH | 5 MEDIUM | ||
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload. | ||||