REDHAT-BUG-1730099: Input Validation
Published Jul 15, 2019
·Updated
An input validation flaw was found in the URL class implementation in the Networking component of OpenJDK. A URL class instance could have been created for a URL string containing invalid characters not permitted in URLs.
Affected Software
1 affected component
OpenJDK Networking
Event History
Jul 15, 2019
Data Sourced
via Red Hat·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What input is affected by this flaw?
URL strings containing characters that are not permitted in URLs may be accepted when a URL class instance is created by the OpenJDK Networking component.
2
What should be reviewed while applying available fixes?
Review applications that construct URL objects from externally supplied or insufficiently validated URL strings. Ensure those inputs are validated against the characters permitted in URLs.