Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:40188
HistoryApr 19, 2023 - 11:10 a.m.

HTTP Request Smuggling

2023-04-1911:10:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
111
http request smuggling
vulnerability
guzzlehttp/psr7
messagetrait.php
header parsing
cache poisoning
phishing attacks
software

EPSS

0.003

Percentile

69.9%

JSON

guzzlehttp/psr7 is vulnerable to HTTP Request Smuggling. The vulnerability exists in assertHeader function of MessageTrait.php due to improper header parsing which allows an attacker to sneak in a newline (\n) into both the header name and value, resulting in HTTP cache poisoning and phishing attacks.

Related

fedora 2
osv 13
friendsofphp 3
nessus 7
github 3
openvas 8
ubuntu 2
cvelist 1
prion 1
cve 1
debiancve 1
ubuntucve 1
nvd 1
freebsd 2
debian 1
mageia 1
fedora
fedora
[SECURITY] Fedora 38 Update: php-nyholm-psr7-1.7.0-1.fc38
2023-04-29 02:53:18
[SECURITY] Fedora 37 Update: php-nyholm-psr7-1.6.1-1.fc37
2023-04-28 02:04:03
osv
osv
php-nyholm-psr7 vulnerability
2024-02-29 16:02:17
Improper header validation in httpsoft/http-message
2023-04-21 20:27:12
Improper Input Validation in nyholm/psr7
2023-04-21 20:27:30
friendsofphp
friendsofphp
Improper header validation
2023-04-17 16:00:00
Improper Input Validation in headers
2023-04-17 16:00:00
Improper Input Validation in headers
2023-04-17 16:00:00
nessus
nessus
Ubuntu 22.04 LTS : php-nyholm-psr7 vulnerability (USN-6671-1)
2024-02-29 00:00:00
Fedora 37 : php-nyholm-psr7 (2023-c29ae4c76f)
2023-04-28 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : php-guzzlehttp-psr7 vulnerabilities (USN-6670-1)
2024-02-29 00:00:00
github
github
Improper header name validation in guzzlehttp/psr7
2023-04-19 18:25:53
HTTP Multiline Header Termination
2023-04-24 22:42:39
Insecure header validation in slim/psr7
2023-04-18 22:20:42
openvas
openvas
Debian: Security Advisory (DLA-3705-1)
2024-01-12 00:00:00
Fedora: Security Advisory for php-nyholm-psr7 (FEDORA-2023-c29ae4c76f)
2023-04-29 00:00:00
Ubuntu: Security Advisory (USN-6671-1)
2024-03-01 00:00:00
ubuntu
ubuntu
php-nyholm-psr7 vulnerability
2024-02-29 00:00:00
php-guzzlehttp-psr7 vulnerabilities
2024-02-29 00:00:00
cvelist
cvelist
CVE-2023-29197 Improper header name validation in guzzlehttp/psr7
2023-04-17 21:08:46
prion
prion
Design/Logic Flaw
2023-04-17 22:15:00
cve
cve
CVE-2023-29197
2023-04-17 22:15:09
debiancve
debiancve
CVE-2023-29197
2023-04-17 22:15:09
ubuntucve
ubuntucve
CVE-2023-29197
2023-04-17 00:00:00
nvd
nvd
CVE-2023-29197
2023-04-17 22:15:09
freebsd
freebsd
mantis -- multiple vulnerabilities
2023-10-14 00:00:00
mediawiki -- multiple vulnerabilities
2023-04-21 00:00:00
debian
debian
[SECURITY] [DLA 3705-1] php-guzzlehttp-psr7 security update
2023-12-31 22:52:23
mageia
mageia
Updated mediawiki packages fix security vulnerability
2023-07-27 01:07:49

EPSS

0.003

Percentile

69.9%

JSON
Related for VERACODE:40188
fedora2osv13friendsofphp3nessus7github3openvas8ubuntu2cvelist1prion1cve1debiancve1ubuntucve1nvd1freebsd2debian1mageia1