CWE-444: HTTP Request Smuggling
The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
Also known as Inconsistent Interpretation of HTTP Requests, HTTP Response Smuggling, HTTP Smuggling.
A kind of CWE-436 Interpretation Conflict.
From the CWE List. © The MITRE Corporation.
Newest
- apache traffic serverApache Traffic Server: Incomplete field name check allows request smuggling7.5 High
- apache traffic serverApache Traffic Server: Incomplete check for chunked trailer section allows request smuggling7.5 High
- docker mobyMoby authz zero length regression10.0 Critical
- broadcom symantec privileged access managementSymantec Privileged Access Manager Remote Command Execution vulnerability8.6 High
- mhuertos phpldapadminmhuertos phpLDAPadmin ajax_functions.js makeHttpRequest request smuggling5.3 Medium
- cloud foundry routing release, cloudfoundry cf-deployment +1 moreGoRouter Denial of Service Attack5.9 Medium
- tornadoweb tornadoTornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding9.0 Critical
- envoyproxy envoyEnvoy incorrectly accepts HTTP 200 response for entering upgrade mode5.9 Medium
- No product listedA deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to...9.6 Critical
- ping identity pingaccessPingAccess HTTP Request Desynchronization Weakness8.8 High
- vercel next.jsNext.js Vulnerable to HTTP Request Smuggling7.5 High
- apache apisixApache APISIX: Forward-Auth Request Smuggling6.3 Medium
- oracle e-business suite, oracle corporation production scheduling +1 moreVulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component:...7.5 High
- benoitc benoitc/gunicorn, gunicorn +1 moreHTTP Request Smuggling in benoitc/gunicorn7.5 High
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP Response Splitting in multiple modules6.3 Medium
- nodejs node, node.js +1 moreThe team has identified a critical vulnerability in the http server of the most recent version of...6.5 Medium
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....9.8 Critical
- apache wicketApache Wicket: Possible bypass of CSRF protection6.5 Medium
- seling visual access managerAn issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the ...6.5 Medium
- tomphttp bare-server-node, tomp bare server +1 moreHTTP Handling Vulnerability in the Bare server9.8 Critical
- apache james, apache software foundation james server +1 moreSMTP smuggling in Apache James7.1 High
- oracle application object libraryVulnerability in the Oracle Application Object Library product of Oracle E-Business Suite ...5.3 Medium
- apache brpcApache bRPC: HTTP request smuggling vulnerability7.5 High
- aio-libs aiohttp, fedoraproject fedora +1 moreaiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators6.5 Medium
- blitiri chasquidchasquid HTTP Request/Response Smuggling vulnerability7.5 High
- fastify fastify-reply-from, reply-from +1 more@fastify-reply-from JSON Content-Type parsing confusion5.3 Medium
- pumaHTTP Request/Response Smuggling in puma5.9 Medium
- sap fiori launchpadClient-Side Desynchronization vulnerability in SAP Fiori Launchpad4.3 Medium
- apache tomcatApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 High
- aio-libs aiohttpAIOHTTP: HTTP request smuggling via WebSocket upgrade6.3 Medium
- qlik senseQlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code...9.6 Critical
- yt-dlpGeneric Extractor MITM Vulnerability in yt-dlp5.0 Medium
- aio-libs aiohttpRequest smuggling in aiohttp5.3 Medium
- aio-libs aiohttpInconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in aiohttp3.4 Low
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 moreSquid: request/response smuggling in http/1.1 and icap9.3 Critical
- twistedtwisted.web has disordered HTTP pipeline response5.3 Medium
- nettyNetty codec-http2: Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass6.9 Medium
- nettyNetty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation6.3 Medium
- nettyNetty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted5.3 Medium
- netty, io.netty netty-codec-http +1 moreNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Medium
- netty, io.netty netty-codec-http, red hat cryostat 4 on rhel 9 +33 more +35 moreNetty: HttpClientCodec response desynchronization7.3 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Medium
- netty, io.netty netty-codec-http +1 moreNetty: HTTP Request Smuggling due to incorrect chunk size parsing6.5 Medium
- nettyNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Medium
- netty, red hat cryostat 4 on rhel 9, logging subsystem for red hat openshift +33 more +35 moreNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 High
- nettyNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Low
- hewlett packer enterprise (hpe) hpe msa controller, hpe msa 1060 storage firmware, msa 2060 storage firmware +1 more +3 moreHPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent...5.4 Medium
- qlik senseAn HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions...9.6 Critical
- pumaInconsistent Interpretation of HTTP Requests in puma7.3 High
- tornadoweb tornadoTornado before 6.3.3 HTTP Request Smuggling via Content-Length9.0 Critical
- Show moreLoading…