CVE-2019-10797

CVE-2019-10797 describes an HTTP Response Splitting vulnerability in Netty, specifically within WSO2 transport-http versions prior to 6.3.1, caused by disabled HTTP Header validation. This medium-severity vulnerability (CVSS 6.5) can be exploited remotely with low attack complexity, potentially leading to high integrity impacts such as session hijacking or cache poisoning, though it requires user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.