Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2023/11/14 8:44 p.m.39 views

CVE-2023-47641 Inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in aiohttp

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol, if both Content-LengthCL and Transfer-EncodingTE header...

3.4CVSS6.7AI score0.00827EPSS
SaveExploits1References2
Rows per page
Query Builder