1 matches found
Request smuggling is possible when both chunked TE and content length specified
Impact Request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle alone \n as a headers separator. Patches https://github.com/ktorio/ktor/pull/1547 Workarounds None except migrating to a better proxy. References...
7.5CVSS0.7AI score0.00762EPSS
SaveExploits0References4Affected Software2
20