2 matches found
Design/Logic Flaw
The Cisco Content Services Switch CSS 11500 with software 8.20.4.02 and the Application Control Engine ACE 4710 with software A23.0 do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling...
7.5CVSS7.3AI score0.01834EPSS
SaveExploits2References5Affected Software2
CVE-2010-2629: Improper Input Validation
The Cisco Content Services Switch CSS 11500 with software 8.20.4.02 and the Application Control Engine ACE 4710 with software A23.0 do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling...
7.5CVSS6AI score0.01471EPSS
SaveExploits0References2
20