Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2023/03/15 7:58 p.m.5 views

golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters

A flaw was found in the golang package, where requests forwarded by reverse proxy include the raw query parameters from the inbound request, including unparseable parameters rejected by net/http. This issue could permit query parameter smuggling when a Go proxy forwards a parameter with an...

7.5CVSS6.6AI score0.01105EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:32 a.m.4 views

SUSE CVE-2022-2880

Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the quer...

7.5CVSS7.2AI score0.01105EPSS
SaveExploits1References9
Rows per page
Query Builder