Lucene search
+L

1 matches found

OSV
OSV
added 2021/07/12 4:54 p.m.36 views

GHSA-F3PG-QWVG-P99C Lenient Parsing of Content-Length Header When Prefixed with Plus Sign

Summary hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests with a Content-Length header with a prefixed plus sign, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that doesn't parse such Content-Length headers, but forwards...

3.1CVSS5.2AI score0.00886EPSS
SaveExploits1References6
Rows per page
Query Builder