2 matches found
Code injection
Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client...
5CVSS6.8AI score0.57941EPSS
SaveExploits0References2Affected Software1
CVE-2022-37436
Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client...
5.3CVSS6.6AI score0.57941EPSS
SaveExploits0
20