HTTP Request smuggling through malformed Transfer Encoding headers

2020-06-16T12:00:00
ID OSV:RUSTSEC-2020-0031
Type osv
Reporter Google
Modified 2021-10-19T22:14:35

Description

HTTP pipelining issues and request smuggling attacks are possible due to incorrect Transfer encoding header parsing.

It is possible conduct HTTP request smuggling attacks (CL:TE/TE:TE) by sending invalid Transfer Encoding headers.

By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.