VDB

GCVE-110-CLOUD-2021-0009

GCVE-110-CLOUD-2021-0009
Advisory Published
Vulnetix · Advisory published November 10, 2021
A flaw in AWS API Gateway enabled hiding HTTP request headers. Tampering with HTTP requests visibility enabled bypassing IP restrictions, cache poisoning and request smuggling.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
AWSAPI Gateway——
GCPAnthos——

References

Predictible seed in Anthos Identity Service LDAP module
advisory
advisory
advisory
AWS API Gateway HTTP header smuggling
advisory

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›