Security Advisory

CVE-2020-11724

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-12 20:55:26
Last updated 2024-08-04 11:41:58
Assigner mitre
State PUBLISHED

Description

An issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP request smuggling, as demonstrated by the ngx.location.capture API.