VDB

CVE-2025-30346

CVE-2025-30346 PUBLISHED

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

EPSS 0.29% · 21.1th percentile

Risk Scores

EPSS Score
0.29%
21.1th percentile

Affected Products

VendorProductVersions
Bitnamivarnish0
Bitnamivarnish0

Timeline

  • Mar 18, 2025 CVE Published
  • Mar 21, 2025 EPSS Score
  • Mar 21, 2025 PoC Published
  • Mar 25, 2025 Coalition ESS Score
  • Apr 3, 2025 EPSS Score
  • Apr 5, 2025 PoC Published
  • Apr 17, 2025 EPSS Score
  • Apr 26, 2025 Coalition ESS Score
  • Apr 27, 2025 PoC Published
  • Apr 30, 2025 EPSS Score
  • May 13, 2025 EPSS Score
  • May 27, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›