CVE-2017-7559

CVE-2017-7559 is a vulnerability in Red Hat Undertow versions 2.x, 1.4.x, and 1.3.x, where an incomplete fix for a prior CVE allowed invalid characters in query strings and path parameters. This flaw, when combined with a misinterpreting proxy, could lead to HTTP response injection, enabling web cache poisoning, Cross-Site Scripting (XSS), or information disclosure. Rated Medium severity (CVSS 6.1), it requires user interaction and network access for exploitation, with potential for low impact on confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.