Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g9pc-8g42-g6vq

Опубликовано: 08 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

EPSS

Процентиль: 4%
0.00023
Низкий

9.1 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.1
ubuntu
2 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 5.4
redhat
2 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 9.1
nvd
2 месяца назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 9.1
msrc
2 месяца назад

Описание отсутствует

CVSS3: 9.1
debian
2 месяца назад

The net/http package improperly accepts a bare LF as a line terminator ...

EPSS

Процентиль: 4%
0.00023
Низкий

9.1 Critical

CVSS3