CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Parent: CWE-436 - Interpretation Conflict

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

315 vulnerabilities with CWE-444
CVE-2021-21445 MEDIUM
SAP Commerce Cloud - HTTP Request Smuggling
CVSS 5.4
CVE-2020-25097 HIGH
Squid < 4.14 - HTTP Request Smuggling
CVSS 8.6
CVE-2020-28483 HIGH
Gin < 1.7.0 - HTTP Request Smuggling
CVSS 7.1
CVE-2020-28473 MEDIUM
Bottle < 0.12.19 - HTTP Request Smuggling
CVSS 6.8
CVE-2020-17509 HIGH
Apache Traffic Server <8.1.0 - Cache Poisoning
CVSS 7.5
CVE-2020-8287 MEDIUM
Node.js <10.23.1, 12.20.1, 14.15.4, 15.5.1 - SSRF
CVSS 6.5
CVE-2020-35884 MEDIUM
Tiny-http < 0.7.0 - HTTP Request Smuggling
CVSS 6.5
CVE-2020-35863 CRITICAL
Hyper < 0.12.34 - HTTP Request Smuggling
CVSS 9.8
CVE-2020-26281 MEDIUM
async-h1 <2.3.0 - Request Smuggling
CVSS 6.8
CVE-2020-28361 MEDIUM
Kamailio < 5.4.0 - HTTP Request Smuggling
CVSS 5.4
CVE-2020-26129 MEDIUM
Jetbrains Ktor < 1.4.1 - HTTP Request Smuggling
CVSS 6.5
CVE-2020-7764 MEDIUM
find-my-way <2.2.5 & 3.0.0-3.0.5 - DoS
CVSS 5.9
CVE-2020-25613 HIGH
Ruby < 2.5.8 - HTTP Request Smuggling
CVSS 7.5
CVE-2020-10687 MEDIUM
Undertow <2.2.0.Final - XSS
CVSS 4.8
CVE-2020-8201 HIGH
Node.js < 12.18.4-14.11 - Open Redirect
CVSS 7.4
CVE-2020-15810 MEDIUM
Squid < 4.13 - HTTP Request Smuggling
CVSS 6.5
CVE-2020-9490 HIGH
Apache HTTP Server < 2.4.46 - HTTP Request Smuggling
CVSS 7.5
CVE-2020-11993 HIGH
Apache HTTP Server < 2.4.44 - HTTP Request Smuggling
CVSS 7.5
CVE-2020-15049 CRITICAL
Squid <4.12, 5.x <5.0.3 - SSRF
CVSS 9.9
CVE-2020-7671 HIGH
Goliath < 1.0.6 - HTTP Request Smuggling
CVSS 7.5
CVE-2020-7670 HIGH
Ohler Agoo < 2.12.3 - HTTP Request Smuggling
CVSS 7.5
CVE-2020-7659 HIGH
Celluloid Reel < 0.6.1 - HTTP Request Smuggling
CVSS 7.5
CVE-2020-10719 MEDIUM
Undertow <2.1.1.Final - SSRF
CVSS 6.5
CVE-2020-7658 MEDIUM
Meinheld < 1.0.2 - HTTP Request Smuggling
CVSS 6.1
CVE-2020-11077 MEDIUM
Puma <4.3.5-3.12.6 - SSRF
CVSS 6.8
Details
Vulnerabilities 315
Links
MITRE CWE Entry Search this CWE With Exploits