CVE-2020-1710 – The issue appears to be that JBoss EAP 6.4.21 does not parse the field-na

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1710

Reference (s):

• https://bugzilla.redhat.com/show_bug.cgi?id=1793970
• URL: https://bugzilla.redhat.com/show_bug.cgi?id=1793970