Description
Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response.
Affected products
broadcom: reactor netty
References2
- pivotal.io/security/cve-2020-5403 Vendor Advisory
- pivotal.io/security/cve-2020-5403 Vendor Advisory
Metrics
- CVSS 3.1
-
7.5
HIGH
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 1% percentile: 67 · as of 2 November 2026
- CWE
- CWE-20CWE-755