Reactor Netty
Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:reactor_netty:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Reactor Netty (1ce81ff2-12b0-5d97-bbe5-0c543bf76576) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-34062 |
vulnerable | 2026-06-08 06:06:24.361696 |
Details available
HIGH (7.5)
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack.
Specifically, an application is vulnerable if Reactor Netty HTTP Server is configured to serve static resources.
Published: 2023-11-15T09:46:42.975Z
Updated: 2024-08-29T17:47:11.730Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31684 |
vulnerable | 2026-06-08 05:44:41.223009 |
Details available
Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.
Published: 2022-10-19T00:00:00.000Z
Updated: 2025-05-09T14:29:04.873Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.