CWE-444: HTTP Request Smuggling
The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
Also known as Inconsistent Interpretation of HTTP Requests, HTTP Response Smuggling, HTTP Smuggling.
A kind of CWE-436 Interpretation Conflict.
From the CWE List. © The MITRE Corporation.
Newest
- sap content server, netweaver application server abap, web dispatcher +2 more +4 moreSAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP...10.0 Critical
- sap netweaver application server javaIn SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22...9.8 Critical
- dlink dir-x1860 firmwareAn HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows...7.5 High
- veridiumid veridiumadAn issue was discovered in VeridiumID VeridiumAD 2.5.3.0. The HTTP request to trigger push...7.3 High
- varnish-software varnish cache, varnish cache project cache, debian linux +3 more +5 moreIn Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and...9.1 Critical
- umbraco cmsUmbraco Remote ApplicationURL Overwrite8.6 High
- umbraco cmsUmbraco Password Reset URL Poison6.8 Medium
- imperva web application firewallImperva Web Application Firewall (WAF) before 2021-12-31 allows remote unauthenticated attackers...9.8 Critical
- cisco adaptive security appliance, adaptive security appliance software, firepower threat defense software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, firepower threat defense software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability8.6 High
- tp-link archer ax10 firmwareAn HTTP/1.1 misconfiguration in web interface of TP-Link AX10v1 before V1_211117 could allow an...7.5 High
- netty, debian linux, netapp oncommand workflow automation +15 more +17 moreHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Medium
- tp-link archer ax10 v1 firmwareAn HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote...7.5 High
- m-files webM-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP...7.5 High
shopware/corePackagist,shopware/platformPackagist +1 moreWebcache Poisoning in shopware/platform and shopware/coreNo score- sensiolabs symfonyWebcache Poisoning in Symfony6.5 Medium
- asus gt-ax11000 firmware, rt-ax3000 firmware, rt-ax55 firmware +15 more +17 moreAn HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55,...7.5 High
- linuxfoundation fabricHTTP Request Smuggling in github.com/hyperledger/fabric7.5 High
- llhttp, debian linux, nodejs node +1 more +3 moreThe parser in accepts requests with a space (SP) right after the header name before the colon....6.5 Medium
- linphone belle-sipBelledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From...7.5 High
- llhttp, debian linux, nodejs node +1 more +3 moreThe parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body...6.5 Medium
- apache traffic server, debian linux +1 moreRequest Smuggling - LF line ending7.5 High
- puma, debian linux +1 moreInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 Low
- zeekAn issue was discovered in zeek version 4.1.0. There is a HTTP request splitting vulnerability...7.5 High
- ping identity pingaccessPing Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.5.3 Medium
- mitmproxyLacking Protection against HTTP Request Smuggling in mitmproxy8.1 High
- sap web dispatcherSAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC ...8.9 High
- pepperl-fuchs wha-gw-f2d2-0-as-z2-eth.eip firmware, wha-gw-f2d2-0-as-z2-eth firmware, phoenix contact wha-gw-f2d2-0-as- z2-eth +1 more +3 moreA vulnerability in WirelessHART-Gateway <= 3.0.8 may allow remote attackers to rewrite links and URLs in cached pages to arbitrary strings5.4 Medium
- mozilla firefox, thunderbird +1 moreFirefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate...8.1 High
- linphone belle-sipBelledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an...7.5 High
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting')...4.3 Medium
- varnish-cache varnish cache, varnish cache project cache, debian linux +1 more +3 moreVarnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a...6.5 Medium
- sap internet communication manager, web dispatcher, sap se web dispatcher and internet communication manager +2 moreSAP Web Dispatcher and Internet Communication Manager (ICM), versions - KRNL32NUC 7.21, 7.21EXT,...5.4 Medium
- apache tomcat, tomee, debian linux +19 more +21 moreIncorrect Transfer-Encoding handling with HTTP/1.05.3 Medium
- hyperLenient Parsing of Content-Length Header When Prefixed with Plus Sign3.1 Low
- apache traffic server, debian linux +1 moreHTTP Request Smuggling, content length with invalid charters7.5 High
- apache traffic server, debian linux +1 moreIncorrect handling of url fragment leads to cache poisoning7.5 High
- actix actix-http, fedoraproject fedora +1 moreHTTP Request Smuggling in actix-http7.5 High
- apache http server, fedoraproject fedora, oracle enterprise manager ops center +2 more +4 moremod_proxy_wstunnel tunneling of non Upgraded connections5.3 Medium
- apache dubboApache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)9.8 Critical
- pulsesecure virtual traffic managerAn HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could...7.5 High
- netty, debian linux, netapp oncommand api services +15 more +17 morePossible request smuggling in HTTP/2 due missing validation of content-length5.9 Medium
- squid-cache squid, debian linux, fedoraproject fedora +1 more +3 moreImportant: squid:4 security update8.6 High
- netty io.netty:netty-codec-http2, netty, apache kudu +6 more +8 morePossible request smuggling in HTTP/2 due missing validation5.9 Medium
- red hat undertow, netapp active iq unified manager, oncommand workflow automation +2 moreHTTP request smuggling in Undertow4.8 Medium
- lightbend akka-httpHTTP Request Smuggling5.0 Medium
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache Poisoning5.9 Medium
- huawei campusinsight, manageone, taurus-al00a firmware +2 moreSome Huawei products have an inconsistent interpretation of HTTP requests vulnerability....7.5 High
- hyperMultiple Transfer-Encoding headers misinterprets request payload4.8 Medium
- jetbrains ktorIn JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible.5.3 Medium
- Show moreLoading…