一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月16日

CVE-2026-102479 – In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x H

未分类
📑 文章目录

In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets well crafted headers as headers of this list, allowing for instance Content-Xength to be interpeted as Content-Length.

This can be exploited for request smuggling purpose.

The impacted component is io.vertx:vertx-core.