CWE-444: HTTP Request Smuggling
The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
Also known as Inconsistent Interpretation of HTTP Requests, HTTP Response Smuggling, HTTP Smuggling.
A kind of CWE-436 Interpretation Conflict.
From the CWE List. © The MITRE Corporation.
Newest
- gin-gonic gin, github.com/gin-gonic/gin +1 moreHTTP Response Splitting7.1 High
- bottlepy bottle, debian linux +1 moreWeb Cache Poisoning6.8 Medium
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to...5.4 Medium
- ibm emptoris sourcingIBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by...6.5 Medium
- nodejs node, node.js, debian linux +3 more +5 moreNode.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in...6.5 Medium
- rust-lang async-h1Async-h1 request smuggling possible with long unread bodies6.1 Medium
- http-rs async-h1request smuggling in async-h16.8 Medium
- apache traffic serverATS negative cache option is vulnerable to a cache poisoning attack. If you have this option...7.5 High
- kamailioKamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2...5.4 Medium
- jetbrains ktorIn JetBrains Ktor before 1.4.1, HTTP request smuggling was possible.6.5 Medium
- delvedor find-my-wayWeb Cache Poisoning5.9 Medium
- ruby-lang ruby, webrick, fedoraproject fedora +2 moreWEBRick vulnerable to HTTP Request/Response Smuggling7.5 High
- red hat undertow, redhat jboss enterprise application platform, single sign-on +2 moreHTTP Request Smuggling in Undertow4.8 Medium
- nodejs node, node.js, fedoraproject fedora +1 more +3 moreNode.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver...7.4 High
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moresquid3 - security update6.5 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 High
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 High
- silverstripeSilverStripe Web Cache Poisoning through HTTPRequestBuilder5.9 Medium
- squid-cache squid, fedoraproject fedora +1 moreModerate: squid:4 security, bug fix, and enhancement update9.9 Critical
- mattermost serverAn issue was discovered in Mattermost Server before 5.12.0. Use of a Proxy HTTP header, rather...5.3 Medium
- fedoraproject fedora, tiny-http project tiny-http +1 moreHTTP Request smuggling in tiny_http6.5 Medium
- apsis poundPound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.9.1 Critical
- goliath project goliathHTTP Request Smuggling in goliath7.5 High
- ohler agooWithdrawn: HTTP Request Smuggling in Agoo7.5 High
- celluloid reelHTTP Request Smuggling in reel7.5 High
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreHTTP Request Smuggling in Undertow6.5 Medium
- meinheldmeinheld vulnerable to HTTP Request Smuggling6.1 Medium
- puma, debian linux, fedoraproject fedora +1 more +3 moreHTTP Smuggling via Transfer-Encoding Header in Puma6.8 Medium
- puma, debian linux, fedoraproject fedora +2 moreHTTP Smuggling via Transfer-Encoding Header in Puma7.5 High
- hive netiusHTTP Request Smuggling in netius6.1 Medium
- gitlabAn issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead...7.5 High
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7...7.5 High
- openresty, debian linux +1 moreAn issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP...7.5 High
- joobyHTTP Response Splitting6.5 Medium
- objectcomputing micronautMicronaut's HTTP client is vulnerable to HTTP Request Header Injection9.8 Critical
- sonicwall sma1000, sma1000 firmware +1 moreA vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote...7.5 High
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...9.8 Critical
- hyperHTTP Request Smuggling in hyper9.8 Critical
- twisted, canonical ubuntu linux, debian linux +3 more +5 moreImproper Input Validation in Twisted9.8 Critical
- twisted, canonical ubuntu linux, debian linux +1 more +3 moreHTTP Request Smuggling in Twisted9.8 Critical
- citrix gateway firmwareCitrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning.5.4 Medium
- citrix gateway firmwareCitrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests.7.5 High
- dlink dsl-2680 firmwareA Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface ...7.5 High
- cloud foundry routing, cloudfoundry routing release +1 moreCloud Foundry GoRouter is vulnerable to cache poisoning5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache Tomcat4.8 Medium
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache Tomcat4.8 Medium
- golang go, redhat enterprise linux, openstack +2 moreThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...9.8 Critical
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...9.8 Critical
- Show moreLoading…