Lucene search
+L

6 matches found

RedHat Linux
RedHat Linux
added 2024/05/23 10:45 p.m.4 views

jetty: Improper validation of HTTP/1 content-length

A flaw was found in Jetty that permits a plus sign + preceding the content-length value in a HTTP/1 header field, which is non-standard and more permissive than RFC. This issue could allow an attacker to request smuggling in conjunction with a server that does not close connections after 400...

5.3CVSS7.1AI score0.01069EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/02/13 2:45 p.m.8 views

jetty: Improper validation of HTTP/1 content-length

A flaw was found in Jetty that permits a plus sign + preceding the content-length value in a HTTP/1 header field, which is non-standard and more permissive than RFC. This issue could allow an attacker to request smuggling in conjunction with a server that does not close connections after 400...

5.3CVSS7.1AI score0.01069EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/12/07 1:41 p.m.15 views

jetty: Improper validation of HTTP/1 content-length

A flaw was found in Jetty that permits a plus sign + preceding the content-length value in a HTTP/1 header field, which is non-standard and more permissive than RFC. This issue could allow an attacker to request smuggling in conjunction with a server that does not close connections after 400...

5.3CVSS7.1AI score0.01069EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/10/17 11:42 a.m.8 views

jetty: Improper validation of HTTP/1 content-length

A flaw was found in Jetty that permits a plus sign + preceding the content-length value in a HTTP/1 header field, which is non-standard and more permissive than RFC. This issue could allow an attacker to request smuggling in conjunction with a server that does not close connections after 400...

5.3CVSS7.1AI score0.01069EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/10/04 11:59 a.m.5 views

jetty: Improper validation of HTTP/1 content-length

A flaw was found in Jetty that permits a plus sign + preceding the content-length value in a HTTP/1 header field, which is non-standard and more permissive than RFC. This issue could allow an attacker to request smuggling in conjunction with a server that does not close connections after 400...

5.3CVSS7.1AI score0.01069EPSS
Exploits0References6
OSV
OSV
added 2017/08/09 6:29 p.m.25 views

UBUNTU-CVE-2014-6393

The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 level responses, which might allow remote attackers to conduct cross-site scripting XSS attacks via characters in a non-standard encoding...

6.1CVSS6.3AI score0.01135EPSS
Exploits0References2
Rows per page
Query Builder