Apache HTTP Server 2.4.0-2.4.55 - HTTP Request Smuggling via mod_proxy RewriteRule
Title source: llmExploitation Summary
CVE-2023-25690 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 5 public exploits from researchers including dhmosfunk, thanhlam-attt, arnavps.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2023-25690, an HTTP Request Smuggling vulnerability in Apache HTTP Server versions 2.4.0 through 2.4.55. It includes a lab setup with Docker for reproducing the vulnerability, explains the root cause (CRLF injection via mod_proxy and RewriteRule), and demonstrates how an attacker can smuggle requests to bypass access controls.
Description
Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the user-supplied request-target (URL) data and is then re-inserted into the proxied request-target using variable substitution. For example, something like: RewriteEngine on RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P] ProxyPassReverse /here/ http://example.com:8080/ Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server.
Exploits (5)
This repository provides a detailed technical analysis of CVE-2023-25690, an HTTP Request Smuggling vulnerability in Apache HTTP Server versions 2.4.0 through 2.4.55. It includes a lab setup with Docker for reproducing the vulnerability, explains the root cause (CRLF injection via mod_proxy and RewriteRule), and demonstrates how an attacker can smuggle requests to bypass access controls.
This repository contains a functional exploit for CVE-2023-25690, demonstrating HTTP Request Smuggling in Apache HTTP Server via crafted requests. The PoC includes a Python script that constructs and sends a malicious request to bypass proxy restrictions and access hidden endpoints.
This repository contains a detailed technical analysis and proof-of-concept for CVE-2023-25690, focusing on HTTP request smuggling over UDP/QUIC. It includes a Flask-based vulnerable application, a UDP proxy, and a comprehensive writeup explaining the root cause, exploitation steps, and mitigation strategies.
This repository provides a detailed technical analysis of CVE-2023-25690, an HTTP Request Smuggling vulnerability in Apache HTTP Server versions 2.4.0 through 2.4.55. It includes a lab setup with Docker to demonstrate the vulnerability, focusing on CRLF injection and internal HTTP Request Smuggling via header injection.
This repository provides a technical writeup on mitigating the impact of CVE-2023-25690, an Apache mod_rewrite issue causing 403 errors for URLs with spaces encoded as %20. It includes a configuration fix using specific RewriteRule flags.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H