Advisories · Weakness
HTTP request smuggling.
Front and back ends that disagree on where a request ends. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.3 Medium
aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
- HTTP request smuggling
<3.8.5 · fixed in 3.8.5
GHSA-45c4-8wx5-qw6w · CVE-2023-37276 - CVSS 8.6 High
Request smuggling and request concatenation in SAP Web Dispatcher
- SAP_SE SAP Web Dispatcher
- HTTP request smuggling
- CVSS 9.1 CriticalCritical · CVSS 9+
Emby Server Proxy Header Spoofing Vulnerability
- EmbySupport security
- HTTP request smuggling
- CVSS 9.8 CriticalCritical · CVSS 9+
LavaLite vulnerable to web cache poisoning
- HTTP request smuggling
<=9.0.0 · no fixed version yet
GHSA-6vcf-cfjp-qxcw · CVE-2023-27238 - CVSS 7.3 High
HTTP request smuggling in HAProxy
- HAProxy
- HTTP request smuggling
- CVSS 9.8 CriticalCritical · CVSS 9+
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
- HTTP request smuggling
<1.35.10 || >=1.38.0, <1.38.6 || >=1.39.0, <1.39.3 · fixed in 1.35.10, 1.38.6, 1.39.3
GHSA-5vj8-g3qg-4qh6 · CVE-2023-29141 - CVSS 7.5 High
Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling
- HTTP request smuggling
<2.0.22 · fixed in 2.0.22
GHSA-vcph-37mh-fqrh · CVE-2023-27522 - CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy
- Apache Software Foundation Apache HTTP Server
- HTTP request smuggling
- CVSS 9.1 CriticalCritical · CVSS 9+
HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP header parsers in HAProxy may accept empt…
- HTTP request smuggling
- CVSS 8.1 High
HTTP request smuggling in Dell PowerVault ME5
- Dell PowerVault ME5
- HTTP request smuggling
- CVSS 9.0 CriticalCritical · CVSS 9+
Apache HTTP Server: mod_proxy_ajp Possible request smuggling
- Apache Software Foundation Apache HTTP Server
- HTTP request smuggling
- CVSS 6.5 Medium
HTTP request smuggling in Node
- Node
- HTTP request smuggling
- CVSS 6.1 Medium
Client-Side Desync Vulnerability
- SolarWinds SEM
- Cross-site scripting (XSS)
- HTTP request smuggling
- CVSS 7.5 High
An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1.
- HTTP request smuggling
- CVSS 7.5 High
Apache Tomcat may reject request containing invalid Content-Length header
- HTTP request smuggling
- CWE-20
>=8.5.0, <8.5.83 || >=9.0.0-M1, <9.0.68 || >=10.0.0-M1, <10.0.27 || >=10.1.0-M1, <10.1.1 · fixed in 8.5.83, 9.0.68, 10.0.27, 10.1.1
GHSA-p22x-g9px-3945 · CVE-2022-42252 -
HTTP request smuggling in Pulse Connect Secure VPN Server
- Pulse Connect Secure VPN Server
- HTTP request smuggling
- CVSS 9.8 CriticalCritical · CVSS 9+
Quarkus does not terminate HTTP requests header context
- HTTP request smuggling
>=2.10.0, <2.10.4 · fixed in 2.10.4
GHSA-mwhw-6p27-4crc · CVE-2022-2466 - CVSS 4.3 Medium
HTTP request smuggling in Cisco Adaptive Security Appliance (ASA) Software and others
- Cisco Adaptive Security Appliance (ASA) Software
- Cisco Firepower Threat Defense Software
- HTTP request smuggling
- CVSS 6.8 Medium
Improper input validation on HTTP/2 headers
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
- CVSS 7.2 High
Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack
- Cross-site scripting (XSS)
- HTTP request smuggling
<2.11.1 · fixed in 2.11.1
GHSA-8274-h5jp-97vr · CVE-2022-31109 - CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields
- HTTP request smuggling
<6.0.7 · fixed in 6.0.7
GHSA-q5vx-44v4-gch4 · CVE-2022-32214 - CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
- HTTP request smuggling
<6.0.7 · fixed in 6.0.7
GHSA-5689-v88g-g6rv · CVE-2022-32213 -
HTTP request smuggling in Node
- Node
- HTTP request smuggling
- CVSS 7.3 High
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon
- libwww-perl HTTP-Daemon
- HTTP request smuggling
-
mod_proxy_ajp: Possible request smuggling
- Apache Software Foundation Apache HTTP Server
- HTTP request smuggling
- CVSS 7.5 High
WEBRick vulnerable to HTTP Request/Response Smuggling
- HTTP request smuggling
<1.4.4 || >=1.5.0, <1.5.1 || >=1.6.0, <1.6.1 · fixed in 1.4.4, 1.5.1, 1.6.1
GHSA-gwfg-cqmg-cf8f · CVE-2020-25613 - CVSS 5.9 Medium
SilverStripe Web Cache Poisoning through HTTPRequestBuilder
- HTTP request smuggling
>=3.0.0, <3.7.5 || >=4.0.0, <4.4.7 || >=4.5.0, <4.5.4 · fixed in 3.7.5, 4.4.7, 4.5.4
GHSA-q9ff-3q93-fm8m · CVE-2019-19326 - CVSS 7.5 High
Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP
- HTTP request smuggling
- CWE-346
>=3.0.7.Final, <3.0.25.Final || >=3.1.4.Final, <3.5.0.CR1 · fixed in 3.0.25.Final, 3.5.0.CR1
GHSA-57q5-x8jf-g7h8 · CVE-2017-7561 - CVSS 5.4 Medium
Keycloak Reflected XSS
- Cross-site scripting (XSS)
- HTTP request smuggling
<3.4.0 · fixed in 3.4.0
GHSA-v38p-mqq3-m6v5 · CVE-2017-12158 - CVSS 2.6 Low
Undertow Request Smuggling vulnerability
- HTTP request smuggling
<1.3.31 || >=1.4.0, <1.4.17 || >=2.0.0.Alpha1, <2.0.0.Beta1 · fixed in 1.3.31, 1.4.17, 2.0.0.Beta1
GHSA-5gg7-5wv8-4gcj · CVE-2017-12165 - CVSS 6.1 Medium
Undertow vulnerable to Request Smuggling
- HTTP request smuggling
>=1.4.0, <1.4.17.Final || >=1.3.0, <1.3.31.Final || >=2.0.0.Alpha1, <2.0.0.Alpha2 · fixed in 1.4.17.Final, 1.3.31.Final, 2.0.0.Alpha2
GHSA-rj76-h87p-r3wf · CVE-2017-7559 -
HTTP request smuggling in origin-aggregated-logging/elasticsearch
- origin-aggregated-logging/elasticsearch
- HTTP request smuggling
- CVSS 8.1 High
Inconsistent Interpretation of HTTP Requests in twisted.web
- HTTP request smuggling
<22.4.0 · fixed in 22.4.0
GHSA-c2jg-hw38-jrqq · CVE-2022-24801 - CVSS 9.1 CriticalCritical · CVSS 9+
Puma vulnerable to HTTP Request Smuggling
- HTTP request smuggling
<4.3.12 || >=5.0.0, <5.6.4 · fixed in 4.3.12, 5.6.4
GHSA-h99w-9q5r-gjq9 · CVE-2022-24790 - CVSS 9.8 CriticalCritical · CVSS 9+
Insufficient Protection against HTTP Request Smuggling in mitmproxy
- HTTP request smuggling
<8.0.0 · fixed in 8.0.0
GHSA-gcx2-gvj7-pxv3 · CVE-2022-24766 - CVSS 7.5 High
HTTP Request Smuggling in waitress
- HTTP request smuggling
<2.1.1 · fixed in 2.1.1
GHSA-4f7p-27jc-3c36 · CVE-2022-24761 - CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Code injection in Apache Dubbo
- Code injection
- HTTP request smuggling
>=2.7.0, <2.7.10 · fixed in 2.7.10
GHSA-7wfc-x4f7-gg2x · CVE-2021-30180 -
HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
- Apache Software Foundation Apache HTTP Server
- HTTP request smuggling
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
HTTP request smuggling in SAP SE SAP NetWeaver and ABAP Platform and others
- SAP SE SAP NetWeaver and ABAP Platform
- SAP SE SAP Web Dispatcher
- HTTP request smuggling
-
HTTP request smuggling in SAP SE SAP NetWeaver Application Server Java
- SAP SE SAP NetWeaver Application Server Java
- HTTP request smuggling
- CVSS 6.8 Medium
Umbraco Persistent Password Reset Poison
- HTTP request smuggling
- CWE-640
<9.2.0 · fixed in 9.2.0
GHSA-r8pr-83cc-ccv7 · CVE-2022-22691 - CVSS 8.6 High
Umbraco ApplicationURL Overwrite
- HTTP request smuggling
<9.2.0 · fixed in 9.2.0
GHSA-jrmq-rv9w-63rv · CVE-2022-22690 - CVSS 6.5 Medium
HTTP request smuggling in netty
- HTTP request smuggling
* · no fixed version yet
GHSA-wx5j-54mm-rqqq · CVE-2021-43797 - CVSS 7.5 High
HTTP Request Smuggling in github.com/hyperledger/fabric
- HTTP request smuggling
<2.4.0 · fixed in 2.4.0
GHSA-j96p-r523-8r3w · CVE-2021-43669 -
Webcache Poisoning in shopware/platform and shopware/core
- HTTP request smuggling
<6.4.6.1 · fixed in 6.4.6.1
GHSA-r64m-qchj-hrjp - CVSS 6.5 Medium
Webcache Poisoning in symfony/http-kernel
- HTTP request smuggling
>=5.2.0, <5.3.12 · fixed in 5.3.12
GHSA-q3j3-w37x-hq2q · CVE-2021-41267 -
HTTP request smuggling in Node
- Node
- HTTP request smuggling
-
HTTP request smuggling in Node
- Node
- HTTP request smuggling
-
Request Smuggling - LF line ending
- Apache Software Foundation Apache Traffic Server
- HTTP request smuggling
- CWE-20
- CVSS 3.7 Low
Puma with proxy which forwards LF characters as line endings could allow HTTP request smuggling
- HTTP request smuggling
<4.3.9 || >=5.0.0, <5.5.1 · fixed in 4.3.9, 5.5.1
GHSA-48w2-rm65-62xx · CVE-2021-41136 - CVSS 6.8 Medium
Async-h1 request smuggling possible with long unread bodies
- HTTP request smuggling
<2.3.0 · fixed in 2.3.0
GHSA-4vr9-8cjf-vf9c · CVE-2020-26281 - CVSS 8.2 High
An issue was discovered in zeek version 4.1.0.
- HTTP request smuggling
- CVSS 8.1 High
Lacking Protection against HTTP Request Smuggling in mitmproxy
- HTTP request smuggling
<7.0.3 · fixed in 7.0.3
GHSA-22gh-3r9q-xf38 · CVE-2021-39214 - CVSS 8.9 High
HTTP request smuggling in SAP SE SAP Web Dispatcher
- SAP SE SAP Web Dispatcher
- HTTP request smuggling
- CVSS 5.4 Medium
A vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings
- Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH
- Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP
- HTTP request smuggling
- CVSS 7.5 High
HTTP Request Smuggling in actix-http
- HTTP request smuggling
<2.2.1 · fixed in 2.2.1
GHSA-8928-2fgm-6x9x · CVE-2021-38512 - CVSS 6.5 Medium
HTTP Request smuggling in tiny_http
- HTTP request smuggling
<0.8.0 · fixed in 0.8.0
GHSA-7v2r-wxmg-mgvc · CVE-2020-35884 - CVSS 9.8 CriticalCritical · CVSS 9+
HTTP Request Smuggling in hyper
- HTTP request smuggling
>=0.11.0, <0.12.34 · fixed in 0.12.34
GHSA-h3qr-rq2j-74w4 · CVE-2020-35863 - CVSS 5.3 Medium
HTTP Request Smuggling in Apache Tomcat
- HTTP request smuggling
>=10.0.0-M1, <10.0.7 || >=9.0.0-M1, <9.0.48 || >=8.5.0, <8.5.68 · fixed in 10.0.7, 9.0.48, 8.5.68
GHSA-4vww-mc66-62m6 · CVE-2021-33037 - CVSS 5.4 Medium
HTTP request smuggling in SAP SE SAP Web Dispatcher and Internet Communication Manager
- SAP SE SAP Web Dispatcher and Internet Communication Manager
- HTTP request smuggling