Security Advisory

CVE-2022-29361

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-05-24 23:56:15

Last updated 2024-08-03 06:17:54

Assigner mitre

State PUBLISHED

Description

Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendors position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project

← Browse all CVEs View on cve.org ↗