What is CVE-2022-29631?

CVE-2022-29631 refers to multiple CLRF injection vulnerabilities in Jodd HTTP v6.0.9.

What is the severity of CVE-2022-29631?

CVE-2022-29631 has a severity rating of 7.5, which is considered high.

Which versions of Jodd HTTP are affected by CVE-2022-29631?

Versions between 5.0 and 6.2.1 of Jodd HTTP are affected by CVE-2022-29631.

Are there any references for CVE-2022-29631?

Yes, you can find more information about CVE-2022-29631 in the GitHub issues: - [https://github.com/oblac/jodd-http/issues/9](https://github.com/oblac/jodd-http/issues/9) - [https://github.com/oblac/jodd/issues/787](https://github.com/oblac/jodd/issues/787)

Vulnerability/
CVE-2022-29631

high

7.5

CWE

74 918

6/6/2022

16/8/2024

CVE-2022-29631: SSRF

Q: How can the CLRF injection vulnerabilities in Jodd HTTP v6.0.9 be exploited?

The vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) by using a crafted TCP payload.

First published: Mon Jun 06 2022(Updated: )

Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Jodd HTTP	>=5.0<=6.2.1
Jodd Jodd Http	>=5.0<6.2.1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2022-29631?
CVE-2022-29631 refers to multiple CLRF injection vulnerabilities in Jodd HTTP v6.0.9.
What is the severity of CVE-2022-29631?
CVE-2022-29631 has a severity rating of 7.5, which is considered high.
How can the CLRF injection vulnerabilities in Jodd HTTP v6.0.9 be exploited?
The vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) by using a crafted TCP payload.
Which versions of Jodd HTTP are affected by CVE-2022-29631?
Versions between 5.0 and 6.2.1 of Jodd HTTP are affected by CVE-2022-29631.
Are there any references for CVE-2022-29631?
Yes, you can find more information about CVE-2022-29631 in the GitHub issues: - [https://github.com/oblac/jodd-http/issues/9](https://github.com/oblac/jodd-http/issues/9) - [https://github.com/oblac/jodd/issues/787](https://github.com/oblac/jodd/issues/787)

collector/nvd-index
agent/references
agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/weakness
agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/author
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/jodd
canonical/jodd http
version/jodd http/5.0
version/jodd http/6.2.1
canonical/jodd jodd http
version/jodd jodd http/5.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.