CVE-2019-20445

CVE-2019-20445 is a critical vulnerability affecting Netty versions prior to 4.1.44, as well as products from Apache, Canonical, Debian, FedoraProject, and Red Hat. This flaw, rated 9.1 CVSS, allows an attacker to bypass security mechanisms by sending a Content-Length header alongside a second Content-Length header or a Transfer-Encoding header, leading to HTTP request smuggling. The attack is network-based, low complexity, and requires no user interaction, potentially resulting in high confidentiality and integrity impacts. While no active exploitation, Metasploit modules, or ExploitDB entries are publicly available, and community discussion is minimal, the high FAUCET Risk Score of 75/100 indicates significant potential risk.