CWE-444: HTTP Request Smuggling
The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
Also known as Inconsistent Interpretation of HTTP Requests, HTTP Response Smuggling, HTTP Smuggling.
A kind of CWE-436 Interpretation Conflict.
From the CWE List. © The MITRE Corporation.
Newest
- haproxyHAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and...7.2 High
- apache traffic serverApache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies9.1 Critical
- vmware horizon clientVMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with...5.3 Medium
- socketry protocol-http1protocol-http1 HTTP Request/Response Smuggling vulnerability5.8 Medium
- envoyproxy envoyEnvoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes8.2 High
- aio-libs aiohttpaiohttp vulnerable to HTTP request smuggling5.3 Medium
- sap web dispatcherRequest smuggling and request concatenation in SAP Web Dispatcher8.6 High
- drogonAll versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when...7.2 High
- embyEmby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For...9.8 Critical
- emby emby.releases, embysupport security +1 moreEmby Server Proxy Header Spoofing Vulnerability9.1 Critical
github.com/apple/swift-nioSwiftURLSwiftNIO vulnerable to HTTP request smuggling using malformed Transfer-Encoding header9.8 Critical- lavaliteLavaLite vulnerable to web cache poisoning9.8 Critical
- haproxyHTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows...7.3 High
- envoyproxy envoyEnvoy doesn't escape HTTP header values8.1 High
- envoyproxy envoyEnvoy forwards invalid Http2/Http3 downstream headers5.4 Medium
- mediawiki, fedoraproject fedora +1 moreX-Forwarded-For header allows brute-forcing autoblocked IP addresses9.8 Critical
- apache http server, unbit uwsgi, debian linux +2 moreApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 High
- apache http serverApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 Critical
- haproxy, debian linux +1 moreHAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...9.1 Critical
- dell powervault me5, powervault me5012 firmware, powervault me5024 firmware +1 more +3 moreDell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync...8.1 High
- apache http serverApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 Critical
- golang h2c, golang.org/x/net golang.org/x/net/http2/h2c +1 moreRequest smuggling due to improper request handling in golang.org/x/net/http2/h2c7.5 High
- fortinet fortiadcMultiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0,...5.1 Medium
- solarwinds security event manager, sem +1 moreClient-Side Desync Vulnerability6.1 Medium
- varnish cache project cache, fedoraproject fedora +1 moreAn issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request...7.5 High
- apache tomcatApache Tomcat request smuggling via malformed content-length7.5 High
- go standard library net/http/httputil, golang go +1 moreIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 High
- llhttp, nodejs node, debian linux +2 more +4 moreThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 Medium
- ivanti connect secure, pulsesecure pulse connect secure +1 morePulse Secure version 9.115 and below may be susceptible to client-side http request smuggling,...5.4 Medium
- quarkusQuarkus does not terminate HTTP requests header context9.8 Critical
- dproxy-nexgen project dproxy-nexgendproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries...7.5 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the Clientless SSL VPN (WebVPN) component of Cisco Adaptive Security Appliance...4.3 Medium
- apache traffic server, debian linux, fedoraproject fedora +2 moreImproper input validation on HTTP/2 headers7.5 High
- getlaminas laminas-diactorosHTTP Host Header Attack Vulnerability in laminas-diactoros7.2 High
- go standard library net/http, golang go +1 moreImproper sanitization of Transfer-Encoding headers in net/http6.5 Medium
- llhttp, nodejs node, node.js +4 more +6 moreThe llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line...6.5 Medium
- llhttp, nodejs node, node.js +2 more +4 morellhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields6.5 Medium
- llhttp, nodejs node, node.js +4 more +6 morellhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding6.5 Medium
- broadcom advanced secure gateway, proxysg +1 moreSymantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync...9.1 Critical
- debian linux, http\ \, libwww-perl http-daemon +2 moreInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon7.3 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy_ajp: Possible request smuggling7.5 High
- palletsprojects werkzeugImproper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to...9.8 Critical
- redhat origin-aggregated-loggingA flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift...5.9 Medium
- twisted, debian linux, fedoraproject fedora +1 more +3 moreHTTP Request Smuggling in twisted.web8.1 High
- puma, debian linux, fedoraproject fedora +2 moreHTTP Request Smuggling in puma9.1 Critical
- mitmproxyInsufficient Protection against HTTP Request Smuggling in mitmproxy9.8 Critical
- agendaless waitress, debian linux +1 moreHTTP Request Smuggling in waitress7.5 High
- isc bind, fedoraproject fedora, juniper junos +9 more +11 moreDNS forwarders - cache poisoning vulnerability6.8 Medium
- apache http server, apple mac os x, macos +4 more +6 moreHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Critical
- ti cc3100 firmware, cc3200 firmware, simplelink cc32xx software development kit +2 moreAn information disclosure vulnerability exists in the HTTP Server /ping.html functionality of...5.3 Medium
- Show moreLoading…