CVE-2022-45059

7.5HIGH

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-b

发布于: 11/9/2022更新于: 5/1/2025
在NVD查看在MITRE查看

描述

An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack can be performed on Varnish Cache servers by requesting that certain headers are made hop-by-hop, preventing the Varnish Cache servers from forwarding critical headers to the backend.

AI分析AI驱动

受影响产品

varnish_cache_projectvarnish_cache
varnish_cache_projectvarnish_cache
7.2.0
fedoraprojectfedora
35
fedoraprojectfedora
36
fedoraprojectfedora
37

参考资料