Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Netty 输入验证错误漏洞
Vulnerability Description
Netty是Netty社区的一款非阻塞I/O客户端-服务器框架，它主要用于开发Java网络应用程序，如协议服务器和客户端等。 Netty 中存在输入验证错误漏洞。远程攻击者可利用该漏洞绕过cookies上的httpOnly旗标，获取敏感信息。以下产品和版本受到影响：Netty 3.9.8.Final之前的版本，3.10.3.Final之前的3.10.x版本，4.0.28.Final之前的4.0.x版本，4.1.0.Beta5之前的4.1.x版本；Play Framework 2.3.9之前的2.x版本。
CVSS Information
N/A
Vulnerability Type
N/A