Beveiligingsadvies

CVE-2023-54397

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 15:17:52

Laatst bijgewerkt 2026-09-15 15:17:52

Toegewezen door VulnCheck

CVSS-score 9.0

Status PUBLISHED

Beschrijving

Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain proxies.

← Alle CVE's bekijken Bekijk op cve.org ↗