Lucene search

Request smuggling leading to endpoint restriction bypass in Gunicorn

🗓️ 16 Apr 2024 00:32:30Reported by GitHub Advisory DatabaseType

Gunicorn request smuggling vulnerability allows endpoint restriction bypass

Reporter	Title	Published	Views	Family All 57
Cvelist	CVE-2024-1135 HTTP Request Smuggling in benoitc/gunicorn	16 Apr 202400:00	–	cvelist
Veracode	HTTP Request Smuggling (HRS)	16 Apr 202410:41	–	veracode
UbuntuCve	CVE-2024-1135	16 Apr 202400:00	–	ubuntucve
IBM Security Bulletins	Security Bulletin: HTTP request smuggling vulnerability in IBM Business Automation Workflow Machine Learning Server CVE-2024-1135	20 Jun 202414:20	–	ibm
IBM Security Bulletins	Security Bulletin: Gunicorn-20.1.0-py3-none-any.whl is vulnerable to CVE-2024-1135 used in IBM Maximo Application Suite - Edge Data Collector	3 Jun 202412:13	–	ibm
IBM Security Bulletins	Security Bulletin: gunicorn-20.1.0-py3-none-any	2 Aug 202408:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Gunicorn affects IBM Process Mining CVE-2024-1135	28 Jun 202415:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses gunicorn-21.2.0-py3-none-any.whl which is vulnerable to CVE-2024-1135.	7 Jun 202406:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to XSS attacks due to [CVE-2024-1135]	5 Jun 202414:58	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo Application Suite - gunicorn-20.1.0-py3-none-any.whl is vulnerable to CVE-2024-1135 used in IBM Maximo Application Suite - Monitor Component	25 Jun 202422:05	–	ibm

Vulners

Node

gunicorn gunicornRange<22.0.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-1135
huntr	www.huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1
github	www.github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d
github	www.github.com/benoitc/gunicorn/releases/tag/22.0.0
lists	www.lists.debian.org/debian-lts-announce/2024/06/msg00027.html
github	www.github.com/advisories/GHSA-w3h3-4rj7-4ph4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Apr 2024 00:30Current

7.4High risk

Vulners AI Score7.4

EPSS0.000

CWE-444