1 matches found
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
Impact Echo v5's BodyDump middleware captured a bounded prefix, drained the remaining request body while ignoring read errors, and then replaced the body with the captured prefix. With an outer BodyLimit, an unknown-length request such as an HTTP/1.1 chunked request, and a BodyDump capture limit...
5.8AI score
SaveExploits0References5Affected Software1
20