Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-22871

Опубликовано: 18 апр. 2025
Источник: msrc
CVSS3: 8.2
EPSS Низкий

Описание

Request smuggling due to acceptance of invalid chunked data in net/http

EPSS

Процентиль: 3%
0.00017
Низкий

8.2 High

CVSS3

Связанные уязвимости

CVSS3: 9.1
ubuntu
7 месяцев назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 5.4
redhat
7 месяцев назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 9.1
nvd
7 месяцев назад

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext.

CVSS3: 9.1
debian
7 месяцев назад

The net/http package improperly accepts a bare LF as a line terminator ...

suse-cvrf
7 месяцев назад

Security update for go1.24

EPSS

Процентиль: 3%
0.00017
Низкий

8.2 High

CVSS3