2 matches found
HTTP Request Smuggling
guzzlehttp/psr7 is vulnerable to HTTP Request Smuggling. The vulnerability exists in assertHeader function of MessageTrait.php due to improper header parsing which allows an attacker to sneak in a newline \n into both the header name and value, resulting in HTTP cache poisoning and phishing attac...
7.5CVSS6.6AI score0.01216EPSS
SaveExploits0References11Affected Software3
20