Lucene search
+L

107 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•8 views

CVE-2024-34350: Inconsistent Interpretation of HTTP Requests

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...

7.5CVSS6AI score0.0119EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/09 9:07 p.m.•90 views

GHSA-77R5-GW3J-2MPF Next.js Vulnerable to HTTP Request Smuggling

Impact Inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to...

7.5CVSS7.4AI score0.0119EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/05/09 9:07 p.m.•74 views

Next.js Vulnerable to HTTP Request Smuggling

Impact Inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses. This led to a response queue poisoning vulnerability in the affected Next.js versions. For a request to...

7.5CVSS6.6AI score0.0119EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2024/05/09 4:07 p.m.•2 views

CVE-2024-34350

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...

8.7CVSS0.0119EPSS
SaveExploits0References6
OSV
OSV
•added 2024/05/09 4:07 p.m.•16 views

CVE-2024-34350 Next.js Vulnerable to HTTP Request Smuggling

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...

7.5CVSS7.2AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/05/09 4:07 p.m.•17 views

CVE-2024-34350 Next.js Vulnerable to HTTP Request Smuggling

Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsistent interpretation of a crafted HTTP request meant that requests are treated as both a single request, and two separate requests by Next.js, leading to desynchronized responses...

7.5CVSS6.7AI score0.0119EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2024/04/12 3:59 a.m.•2588 views

Exploit for HTTP Request Smuggling in Apache Http_Server

CVE-2022-26377 A Proof of Concept developed by @watchTowr to...

7.5CVSS9.1AI score0.21079EPSS
SaveExploits1
Rows per page
Query Builder