Lucene search
+L

65 matches found

OSV
OSV
added 2024/05/09 9:07 p.m.79 views

GHSA-77R5-GW3J-2MPF Next.js Vulnerable to HTTP Request Smuggling

Impact Inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to...

7.5CVSS7.4AI score0.01158EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/05/09 9:07 p.m.61 views

Next.js Vulnerable to HTTP Request Smuggling

Impact Inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to...

7.5CVSS6.6AI score0.01158EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/05/09 4:07 p.m.11 views

CVE-2024-34350 Next.js Vulnerable to HTTP Request Smuggling

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...

7.5CVSS7.2AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/05/09 4:07 p.m.16 views

CVE-2024-34350 Next.js Vulnerable to HTTP Request Smuggling

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...

7.5CVSS6.7AI score0.01158EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/04/12 3:59 a.m.2417 views

Exploit for HTTP Request Smuggling in Apache Http_Server

CVE-2022-26377 A Proof of Concept developed by @watchTowr to...

7.5CVSS9.1AI score0.20193EPSS
SaveExploits1
Rows per page
Query Builder