Lucene search
CVE-2022-1705
Acceptance of invalid Transfer-Encoding headers in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling
Show more
| Reporter | Title | Published | Views | Family All 199 |
|---|---|---|---|---|
 | CVE-2022-1705 Improper sanitization of Transfer-Encoding headers in net/http | 9 Aug 202220:16 | – | cvelist |
 | CVE-2022-1705 | 10 Aug 202220:15 | – | osv |
| Improper sanitization of Transfer-Encoding headers in net/http | 25 Jul 202217:34 | – | osv |
| BIT-golang-2022-1705 | 6 Mar 202411:03 | – | osv |
| Red Hat Security Advisory: toolbox security and bug fix update | 30 Sep 202414:28 | – | osv |
| Red Hat Security Advisory: OpenShift Container Platform 4.11.17 packages and security update | 30 Sep 202414:29 | – | osv |
| Moderate: toolbox security and bug fix update | 15 Nov 202200:00 | – | osv |
| Moderate: toolbox security and bug fix update | 15 Nov 202206:15 | – | osv |
| Moderate: grafana-pcp security update | 8 Nov 202200:00 | – | osv |
| Red Hat Security Advisory: grafana-pcp security update | 30 Sep 202414:28 | – | osv |
10
[
{
"vendor": "Go standard library",
"product": "net/http",
"collectionURL": "https://pkg.go.dev",
"packageName": "net/http",
"versions": [
{
"version": "0",
"lessThan": "1.17.12",
"status": "affected",
"versionType": "semver"
},
{
"version": "1.18.0-0",
"lessThan": "1.18.4",
"status": "affected",
"versionType": "semver"
}
],
"programRoutines": [
{
"name": "transferReader.parseTransferEncoding"
}
],
"defaultStatus": "unaffected"
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo10 Aug 2022 20:15Current
7.5High risk
Vulners AI Score7.5
CVSS36.5
EPSS0.002