CWE-444: HTTP Request Smuggling
The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
Also known as Inconsistent Interpretation of HTTP Requests, HTTP Response Smuggling, HTTP Smuggling.
A kind of CWE-436 Interpretation Conflict.
From the CWE List. © The MITRE Corporation.
Newest
- eventletEventlet affected by HTTP request smuggling in unparsed trailers6.3 Medium
- akamai akamaighostAkamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an...4.0 Medium
mitmproxyPyPImitmproxy binaries embed a vulnerable python-hyper/h2 dependency6.9 Medium- akamai akamaighostAn issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26....4.0 Medium
- espocrmEspoCRM is vulnerable to access denial through double slash in URI corrupting router cache4.5 Medium
- aio-libs aiohttpAIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections1.7 Low
- yhirose cpp-httplibcpp-httplib does not limit the length of a line6.3 Medium
- vercel next.jsNext.js DoS vulnerability via cache poisoning7.5 High
- vercel next.js, vercel +1 moreNext.js cache poisoning due to omission of Vary header3.7 Low
- ruby webrickRuby WEBrick read_header HTTP Request Smuggling Vulnerability6.5 Medium
- vmware spring cloud gateway, spring cloud gateway server mvc +1 moreCVE-2025-41235: Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies8.6 High
- cloudflare pingoraRequest Smuggling Vulnerability in Pingora7.4 High
- nodejs nodeA flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX`...6.5 Medium
- google application load balancer, google cloud classic application load balancer +1 moreHTTP Request Smuggling in Google Cloud Classic Application Load Balancer due to Improper Chunked Encoding Validation8.7 High
- varnish-software varnish cacheVarnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow...5.4 Medium
- radware cloud wafRadware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass...9.1 Critical
- python-hyper h11h11 accepts some malformed Chunked-Encoding bodies9.1 Critical
- openresty lua-nginx-moduleAn issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct...7.7 High
- croogocroogo Host header injection9.1 Critical
- ch-go, clickhouse ch +1 moreQuery smuggling in ch-go library5.9 Medium
- apache traffic serverApache Traffic Server: Malformed chunked message body allows request smuggling7.5 High
- go standard library net/http/internal, siemens sentron 7kt pac1261 data manager +1 moreRequest smuggling due to acceptance of invalid chunked data in net/http9.1 Critical
- @tanstack react-routerRemix and React Router allow URL manipulation via Host / X-Forwarded-Host headers7.5 High
- ibm cognos controller, controller +1 moreIBM Cognos Controller HTTP response smuggling4.7 Medium
- varnish-software varnish cache, varnish enterprise, varnish cache project cache +2 moreVarnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via...5.4 Medium
- netease-youdao netease-youdao/qanything, youdao qanything +1 moreHTTP Request Smuggling in netease-youdao/qanything7.5 High
- benoitc benoitc/gunicornHTTP Request Smuggling in benoitc/gunicorn7.5 High
- jetbrains ktorIn JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible5.3 Medium
- ithewei libhvHTTP Response Smuggling Vulnerability in libhv10.0 Critical
- No product listedIn Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the...6.8 Medium
- red hat openshift service mesh 2, redhat openshift service mesh +1 moreEnvoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized access7.1 High
- No product listedIn Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to...9.1 Critical
- red hat cryostat 3, cryostat 4 on rhel 9, hawtio hawtio 4.2.0 +12 more +14 moreIo.quarkus.http/quarkus-http-core: quarkus http cookie smuggling7.4 High
- haproxy, haproxy project 2.6, 2.8 +2 more +4 moreInconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in...5.3 Medium
- red hat build of keycloak, build of keycloak 24, build of keycloak 24.0.9 +3 more +5 moreOrg.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerability4.7 Medium
- aio-libs aiohttpaiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions6.3 Medium
- gnome libsoupGNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0'...7.5 High
- agendaless waitressWaitress has request processing race condition in HTTP pipelining with invalid first request9.1 Critical
- oracle banking liquidity managementVulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services...5.3 Medium
- davidepianca98 kmqttAn issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service(DoS) via a crafted request.7.5 High
- google looker, cloud looker +1 moreHTTP Request Smuggling in Looker8.9 High
- red hat jboss data grid 7, jboss enterprise application platform 7, jboss enterprise application platform 8 +1 more +3 moreResteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty45.3 Medium
- joinmastodon mastodonIn Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request...5.9 Medium
- red hat migration toolkit for applications 6, migration toolkit for runtimes 1 on rhel 8, build of apache camel for spring boot 3 +21 more +23 moreUndertow: cookie smuggling/spoofing7.4 High
- phpErroneous parsing of multipart form data3.1 Low
- pumaHeader normalization allows for client to clobber proxy set headers in Puma5.4 Medium
- loway queuemetricsLoway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')4.3 Medium
- joomial project cms, joomla joomla\! +1 more[20240802] - Core - Cache Poisoning in Pagination9.1 Critical
- typechoTypecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows...5.3 Medium
- twistedtwisted.web has disordered HTTP pipeline response8.3 High
- Show moreLoading…