NGINX < 1.17.7 - HTTP Request Smuggling via error_page Configuration
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-20372. PoCs published by 0xleft, moften, vuongnv3389-sec.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2019-20372, an HTTP request smuggling vulnerability in nginx. The exploit leverages the error_page directive to smuggle a second request, potentially bypassing access controls.
Description
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.
Exploits (3)
This repository contains a functional exploit for CVE-2019-20372, an HTTP request smuggling vulnerability in nginx. The exploit leverages the error_page directive to smuggle a second request, potentially bypassing access controls.
This repository contains a functional Python exploit for CVE-2019-20372, targeting Nginx versions before 1.17.7. The exploit attempts to upload a malicious PHP file via HTTP PUT request, leveraging misconfigured error_page directives to achieve unauthenticated file upload and potential remote code execution.
This repository contains a functional proof-of-concept for CVE-2019-20372, an HTTP request smuggling vulnerability in Nginx. The exploit leverages a malformed HTTP request with conflicting Content-Length headers to smuggle a secondary request, potentially accessing hidden endpoints.
References (11)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N