VDB
CNVD-2022-51061
CNVD-2022-51061
PUBLISHED
Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。 Apache HTTP Server存在环境问题漏洞，该漏洞源于Apache HTTP Server在丢弃请求正文时无法关闭入站连接，从而导致请求夹带（request smuggling）。该漏洞影响Apache HTTP Server2.4.52版本及更早版本。目前没有详细的漏洞细节提供。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache HTTP Server <=2.4.52 |
Exploit Intelligence
- Benasin/CVE-2022-22720 (github-poc-repo)
- Benasin/CVE-2022-22720 (github-poc)
- risk_calculator.cpp (github-poc)
- risk_calculator.cpp (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
Timeline
- May 27, 2022 CVE ID Reserved
- Jul 12, 2022 CVE Published