CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2024/05/02 10:15 a.m.•29 views

CVE-2024-32638

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in Apache APISIX when using forward-auth plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0. Users are recommended to upgrade to version 3.8.1, 3.9.1 or higher, which fixes the issue...

6.3CVSS6.6AI score0.01065EPSS

SaveExploits0References2

CVE•added 2024/05/02 9:20 a.m.•149 views

CVE-2024-32638

Apache APISIX versions 3.8.0 and 3.9.0 are vulnerable to an HTTP Request Smuggling issue (Inconsistent Interpretation of HTTP Requests) when utilizing the forward-auth plugin. The root cause is tied to how the gateway handles requests through this specific plugin. To remediate this vulnerability,...

6.3CVSS6.4AI score0.01065EPSS

SaveExploits0References2Affected Software1

osv_cve•added 2024/05/02 9:20 a.m.•16 views

CVE-2024-32638 Apache APISIX: Forward-Auth Request Smuggling

6.3CVSS6AI score0.01065EPSS

SaveExploits0References4

Vulnrichment•added 2024/05/02 9:20 a.m.•35 views

CVE-2024-32638 Apache APISIX: Forward-Auth Request Smuggling

6.4AI score0.01065EPSS

SaveExploits0References2

Cvelist•added 2024/05/02 9:20 a.m.•54 views

CVE-2024-32638 Apache APISIX: Forward-Auth Request Smuggling

6.8AI score0.01065EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by