Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2021/07/12 4:54 p.m.44 views

Lenient Parsing of Content-Length Header When Prefixed with Plus Sign

Summary hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests with a Content-Length header with a prefixed plus sign, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that doesn't parse such Content-Length headers, but forwards...

5.3CVSS0.00886EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder