Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.
References
| Link | Resource |
|---|---|
| https://httpd.apache.org/security/vulnerabilities_24.html | Mailing List Vendor Advisory |
| https://security.gentoo.org/glsa/202309-01 |
Configurations
History
08 Sep 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions. |
30 Jan 2023, 19:21
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.0 |
25 Jan 2023, 02:09
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apache
Apache http Server |
|
| CPE | cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:* | |
| References | (MISC) https://httpd.apache.org/security/vulnerabilities_24.html - Mailing List, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
17 Jan 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-01-17 20:15
Updated : 2023-09-08 22:15
NVD link : CVE-2022-36760
Mitre link : CVE-2022-36760
CVE.ORG link : CVE-2022-36760
JSON object : View
Products Affected
apache
- http_server
CWE
CWE-444
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')