Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.
References
Configurations
History
21 Nov 2024, 06:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2022/06/08/2 - Mailing List, Third Party Advisory | |
| References | () https://httpd.apache.org/security/vulnerabilities_24.html - Vendor Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7QUGG2QZWHTITMABFLVXA4DNYUOTPWYQ/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPY2BLEVJWFH34AX77ZJPLD2OOBYR6ND/ - | |
| References | () https://security.gentoo.org/glsa/202208-20 - Third Party Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20220624-0005/ - Third Party Advisory |
07 Nov 2023, 03:44
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
Information
Published : 2022-06-09 17:15
Updated : 2024-11-21 06:53
NVD link : CVE-2022-26377
Mitre link : CVE-2022-26377
CVE.ORG link : CVE-2022-26377
JSON object : View
Products Affected
netapp
- clustered_data_ontap
fedoraproject
- fedora
apache
- http_server
CWE
CWE-444
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')