H1-2032842 — Vulnetix

H1-2032842 PUBLISHED CVSS 6.5 MEDIUM

HTTP Request Smuggling via Empty headers separated by CR

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploit Intelligence

HTTP Request Smuggling via Empty headers separated by CR (hackerone)
HTTP Request Smuggling via Empty headers separated by CR (hackerone)

Timeline

Aug 28, 2023 CVE Published
Aug 28, 2023 PoC Published

References

HTTP Request Smuggling via Empty headers separated by CR advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›