golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

Security Bulletin: IBM Integration Bus is vulnerable to multiple CVEs due to Apache Tomcat.

Summary Due to Apache Tomcat, IBM Integration Bus is vulnerable to multiple CVEs. CVE-2023-45648, CVE-2023-42794, CVE-2023-44487, CVE-2023-42795. Vulnerability Details CVEID: CVE-2023-45648 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of HTTP...

Cache Poisoning

moodle/moodle is vulnerable to Cache Poisoning. The vulnerability exists because the library does not impose any restrictions on the minimum value for a revision. If the revision is either too old or too new, the file content is cached without undergoing any validation through the file serving...

Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

GHSA-CWH2-Q44X-5W3C Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

Design/Logic Flaw

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

UBUNTU-CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548 Moodle: cache poisoning risk with endpoint revision numbers

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548 Moodle: cache poisoning risk with endpoint revision numbers

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

CVE-2023-5548

CVE-2023-5548 describes a Moodle-related issue where stronger revision number limitations on file serving endpoints are required to improve cache poisoning protection. The linked OSV/GHSA entries reiterate this root cause, framing it as a risk tied to how file endpoints handle revision data. The ...

PT-2023-32169 · Moodle +7 · Moodle +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves the need for stronger revision number limitations on file serving endpoints to enhance cache poisoning protection. This is a measure ...

CVE-2023-5548: Acceptance of Extraneous Untrusted Data With Trusted Data

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...

golang: net/http: insufficient sanitization of Host header

A flaw was found in Golang, where it is vulnerable to HTTP header injection caused by improper content validation of the Host header by the HTTP/1 client. A remote attacker can inject arbitrary HTTP headers by persuading a victim to visit a specially crafted Web page. This flaw allows the attacke...