Lucene search
+L

342 matches found

OSV
OSV
•added 2023/03/07 6:30 p.m.•21 views

GHSA-VCPH-37MH-FQRH Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server from 2.4.30 through 2.4.55 and the uWSGI PyPI package prior to version 2.0.22. Special characters in the origin response header can truncate/split the response forwarded to the...

7.5CVSS7.1AI score0.02134EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2023/03/07 6:30 p.m.•165 views

Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server from 2.4.30 through 2.4.55 and the uWSGI PyPI package prior to version 2.0.22. Special characters in the origin response header can truncate/split the response forwarded to the...

7.5CVSS6.8AI score0.02134EPSS
SaveExploits0References9Affected Software1
RedhatCVE
RedhatCVE
•added 2023/03/07 4:30 p.m.•117 views

CVE-2023-27522

An HTTP Response Smuggling vulnerability was found in the Apache HTTP Server via modproxyuwsgi. This security issue occurs when special characters in the origin response header can truncate or split the response forwarded to the client. Mitigation Mitigation for this issue is either not available...

7.5CVSS7.9AI score0.02134EPSS
SaveExploits0References4
NVD
NVD
•added 2023/03/07 4:15 p.m.•61 views

CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS8.5AI score0.02134EPSS
SaveExploits0References3
OSV
OSV
•added 2023/03/07 4:15 p.m.•16 views

AZL-25606 CVE-2023-27522 affecting package httpd for versions less than 2.4.56-1

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS7.2AI score0.02134EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/07 4:15 p.m.•15 views

ALPINE-CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS7AI score0.02134EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/07 4:15 p.m.•8 views

DEBIAN-CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS7.5AI score0.02134EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/07 4:15 p.m.•47 views

Design/Logic Flaw

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

5CVSS8.3AI score0.02134EPSS
SaveExploits0References3Affected Software3
OSV
OSV
•added 2023/03/07 4:15 p.m.•11 views

UBUNTU-CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS7.1AI score0.02134EPSS
SaveExploits0References3
CVE
CVE
•added 2023/03/07 3:09 p.m.•1673 views

CVE-2023-27522

CVE-2023-27522 affects Apache HTTP Server (httpd) versions 2.4.30–2.4.55 via mod_proxy_uwsgi. The issue is HTTP Response Smuggling where special characters in the origin response header can truncate or split the response forwarded to the client. AlmaLinux and ALAS advisories explicitly reference ...

7.5CVSS8.8AI score0.02134EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
•added 2023/03/07 3:09 p.m.•72 views

CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS8.9AI score0.02134EPSS
SaveExploits0
OSV
OSV
•added 2023/03/07 3:09 p.m.•374 views

CVE-2023-27522 Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS7.1AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2023/03/07 3:09 p.m.•129 views

CVE-2023-27522 Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

8.8AI score0.02134EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/03/07 12:00 a.m.•472 views

Apache 2.4.x < 2.4.56 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is prior to 2.4.56. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.56 advisory. - HTTP request splitting with modrewrite and modproxy: Some modproxy configurations on Apache HTTP Server versions 2.4.0 throug...

9.8CVSS7.1AI score0.84508EPSS
SaveExploits6References2
UbuntuCve
UbuntuCve
•added 2023/03/07 12:00 a.m.•144 views

CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS7.1AI score0.02134EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•2 views

CVE-2023-27522: Inconsistent Interpretation of HTTP Requests

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

7.5CVSS5.9AI score0.02134EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/03/07 12:00 a.m.•12 views

Apache HTTP Server 环境问题漏洞

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable, and extensible via a simple API. An environmental issue vulnerability exists in Apache HTTP Server versions 2.4.30 through 2.4.55, which stems from the discovery of an HTT...

7.5CVSS8AI score0.02134EPSS
SaveExploits0References12
SUSE CVE
SUSE CVE
•added 2023/02/15 6:15 a.m.•11 views

SUSE CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via 1 invalid HTTP response headers with spaces...

2.6CVSS8.6AI score0.01766EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 3:59 a.m.•8 views

SUSE CVE-2020-11076

In Puma RubyGem before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4...

6.8CVSS7AI score0.04088EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2023/01/29 12:00 a.m.•15 views

PT-2023-2262

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.30 through 2.4.55 uWSGI PyPI package versions prior to 2.0.22 Description The issue is related to HTTP Response Smuggling vulnerability in Apache HTTP Server via mod proxy uwsgi. Special characters in the origin...

9CVSS7.2AI score0.02134EPSS
SaveExploits0References183
Rows per page
Query Builder