Lucene search
Redhat.comRH:CVE-2024-23326HistoryJun 14, 2024 - 12:12 p.m.
CVE-2024-23326
2024-06-1412:12:41
redhat.com
access.redhat.com
3
cve-2024-23326
request smuggling
vulnerability
envoy
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
37.2%
A possible request smuggling vulnerability exists through Envoy. This issue occurs if a server can be tricked into adding an upgrade header into a response.
Related
nvd
nvd
CVE-2024-23326
2024-06-04 21:15:33
veracode
veracode
Request Smuggling
2024-06-07 05:23:15
cvelist
cvelist
cve
cve
CVE-2024-23326
2024-06-04 21:15:33
osv
osv
BIT-envoy-2024-23326
2024-06-06 07:20:12
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
37.2%
Related for RH:CVE-2024-23326