Skip to content

Product

org.jodd/jodd-http vulnerabilities

1 published CVE affecting org.jodd/jodd-http, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.jodd/jodd-http CVEs

Newest publication first

  1. CVE-2022-29631 Server-Side Request Forgery in Jodd HTTP

    Published
    HighCVSS 7.5 EPSS 1.0%

    Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.