Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hwqh-57w6-xm49

Опубликовано: 17 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

EPSS

Процентиль: 52%
0.00295
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-444

Связанные уязвимости

CVSS3: 9
ubuntu
почти 3 года назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

CVSS3: 6.5
redhat
почти 3 года назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

CVSS3: 9
nvd
почти 3 года назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

CVSS3: 9
msrc
почти 3 года назад

Apache HTTP Server: mod_proxy_ajp Possible request smuggling

CVSS3: 9
debian
почти 3 года назад

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling' ...

EPSS

Процентиль: 52%
0.00295
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-444