Beveiligingsadvies

CVE-2022-29361

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-05-24 23:56:15

Laatst bijgewerkt 2024-08-03 06:17:54

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project

← Alle CVE's bekijken Bekijk op cve.org ↗