Lucene search

K

MitreCVELIST:CVE-2022-45059

HistoryNov 09, 2022 - 12:00 a.m.

CVE-2022-45059

2022-11-0900:00:00

mitre

www.cve.org

varnish cache

request smuggling

attack

cve-2022-45059

headers

servers

0.001 Low

EPSS

Percentile

47.3%

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.

References

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G6ZMOZVBLZXHEV5VRW4I4SOWLQEK5OF5/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M4KVVCIQVINQQ2D7ORNARSYALMJUMP3I/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGF6LFTHXCSYMYUX5HLMVXQH3WHCSFLU/

varnish-cache.org/security/VSV00010.html

0.001 Low

EPSS

Percentile

47.3%

Related for CVELIST:CVE-2022-45059

osv2 nvd1 cve1 veracode1 githubexploit2 prion1 debiancve1 redhatcve1 ubuntucve1 nessus3 openvas4 fedora4