[io.undertow:undertow-core] Undertow Request Smuggling vulnerability

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.

References

• https://nvd.nist.gov/vuln/detail/CVE-2017-12165
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12165
• https://issues.redhat.com/browse/UNDERTOW-1251
• https://github.com/advisories/GHSA-5gg7-5wv8-4gcj