Lucene search
+L

2 matches found

OSV
OSV
•added 2024/02/01 4:09 p.m.•129 views

CVE-2024-24753 Bref Multiple Value Headers Not Supported in ApiGatewayFormatV2

Bref enable serverless PHP on AWS Lambda. When Bref is used in combination with an API Gateway with the v2 format, it does not handle multiple values headers. If PHP generates a response with two headers having the same key but different values only the latest one is kept. If an application relie...

4.8CVSS6.5AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•1 views

CVE-2024-24753: Interpretation Conflict

Bref enable serverless PHP on AWS Lambda. When Bref is used in combination with an API Gateway with the v2 format, it does not handle multiple values headers. If PHP generates a response with two headers having the same key but different values only the latest one is kept. If an application relie...

6.5CVSS5.8AI score0.00426EPSS
SaveExploits1References2
Rows per page
Query Builder