{"cve":{"cve_id":"CVE-2020-10719","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.01005,"epss_percentile":0.58452,"epss_as_of":"2026-06-23","description":"A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.","published_at":"2020-05-26T14:57:51Z","last_modified_at":null,"cvss_v3_score":6.5,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-444"],"nvd_references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10719","https://security.netapp.com/advisory/ntap-20220210-0014/"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:13:15.627011Z"},"effective_severity":"MEDIUM","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"L","value_label":"Low"},{"metric":"I","name":"Integrity","value":"L","value_label":"Low"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"red-hat","vendor_name":"Red Hat","product_slug":"undertow","product_name":"undertow","version_start":"Versions before 2.1.1.Final","version_start_inclusive":true,"version_end":"Versions before 2.1.1.Final","version_end_inclusive":true,"cpe23_uri":"cve5:red-hat:undertow:Versions before 2.1.1.Final:Versions before 2.1.1.Final"}],"exploit_refs":[],"news":[],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10719","source_type":"MISC","tags":[]},{"url":"https://security.netapp.com/advisory/ntap-20220210-0014/","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2020-05-26T14:57:51Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:02:00.430480Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:02:00.430480Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:02:00.430480Z","label":"CVSS score revised","source":"cvelistv5"}]}