Lucene search
Redhat.comRH:CVE-2023-38697HistoryAug 05, 2023 - 3:48 p.m.
CVE-2023-38697
2023-08-0515:48:44
redhat.com
access.redhat.com
12
0.001 Low
EPSS
Percentile
27.2%
A flaw was found in the protocol-http1 rubygem package. The protocol-http1 provides a low-level implementation of the HTTP/1 protocol. This behavior can lead to desync when forwarding through multiple HTTP parsers, potentially resulting in HTTP request smuggling and firewall bypassing.
Related
nessus
nessus
CBL Mariner 2.0 Security Update: rubygem-protocol-http1 (CVE-2023-38697)
2023-08-31 00:00:00
cbl_mariner
cbl_mariner
osv
osv
CVE-2023-38697
2023-08-04 18:15:15
protocol-http1 HTTP Request/Response Smuggling vulnerability
2023-08-03 16:36:34
prion
prion
Design/Logic Flaw
2023-08-04 18:15:00
debiancve
debiancve
CVE-2023-38697
2023-08-04 18:15:15
ubuntucve
ubuntucve
CVE-2023-38697
2023-08-04 00:00:00
cve
cve
CVE-2023-38697
2023-08-04 18:15:15
github
github
protocol-http1 HTTP Request/Response Smuggling vulnerability
2023-08-03 16:36:34
veracode
veracode
HTTP Request Smuggling
2023-08-07 10:02:17
cvelist
cvelist
CVE-2023-38697 protocol-http1 HTTP Request/Response Smuggling vulnerability
2023-08-04 17:32:51
