Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-eay7-63um-43e9
SummaryApache Traffic Server allows request smuggling if chunked messages are malformed.  This issue affects Apache Traffic Server: from 9.2.0 through 9.2.9, from 10.0.0 through 10.0.4. Users are recommended to upgrade to version 9.2.10 or 10.0.5, which fixes the issue.
Aliases
0
alias CVE-2024-53868
Fixed_packages
0
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armhf&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armhf&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=armhf&distroversion=v3.21&reponame=community
1
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=x86_64&distroversion=v3.23&reponame=community
2
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=armhf&distroversion=edge&reponame=community
3
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
4
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=aarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=aarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=aarch64&distroversion=v3.22&reponame=community
5
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=armv7&distroversion=v3.22&reponame=community
6
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=loongarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=loongarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community
7
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=ppc64le&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=ppc64le&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community
8
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=riscv64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=riscv64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=riscv64&distroversion=v3.22&reponame=community
9
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=s390x&distroversion=v3.22&reponame=community
10
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=x86&distroversion=v3.22&reponame=community
11
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86_64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86_64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=x86_64&distroversion=v3.22&reponame=community
12
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armv7&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armv7&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=armv7&distroversion=v3.21&reponame=community
13
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=loongarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=loongarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=loongarch64&distroversion=v3.21&reponame=community
14
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=x86&distroversion=v3.21&reponame=community
15
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86_64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86_64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=x86_64&distroversion=v3.21&reponame=community
16
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=aarch64&distroversion=v3.23&reponame=community
17
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=aarch64&distroversion=edge&reponame=community
18
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=loongarch64&distroversion=edge&reponame=community
19
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=ppc64le&distroversion=edge&reponame=community
20
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=riscv64&distroversion=edge&reponame=community
21
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=x86&distroversion=edge&reponame=community
22
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=x86_64&distroversion=edge&reponame=community
23
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armhf&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armhf&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=armhf&distroversion=v3.22&reponame=community
24
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=x86&distroversion=v3.23&reponame=community
25
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=armv7&distroversion=edge&reponame=community
26
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=s390x&distroversion=edge&reponame=community
27
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=ppc64le&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=ppc64le&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=ppc64le&distroversion=v3.21&reponame=community
28
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=riscv64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=riscv64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=riscv64&distroversion=v3.21&reponame=community
29
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=s390x&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=s390x&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=s390x&distroversion=v3.21&reponame=community
30
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=armv7&distroversion=v3.23&reponame=community
31
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
32
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=armhf&distroversion=v3.23&reponame=community
33
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community
34
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=riscv64&distroversion=v3.23&reponame=community
35
url pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/trafficserver9@9.2.10-r0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/trafficserver9@9.2.10-r0%3Farch=s390x&distroversion=v3.23&reponame=community
36
url pkg:deb/debian/trafficserver@9.2.5%2Bds-0%2Bdeb12u3?distro=sid
purl pkg:deb/debian/trafficserver@9.2.5%2Bds-0%2Bdeb12u3?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.5%252Bds-0%252Bdeb12u3%3Fdistro=sid
37
url pkg:deb/debian/trafficserver@9.2.5%2Bds-0%2Bdeb12u3
purl pkg:deb/debian/trafficserver@9.2.5%2Bds-0%2Bdeb12u3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.5%252Bds-0%252Bdeb12u3
Affected_packages
0
url pkg:deb/debian/trafficserver@8.1.10%2Bds-1~deb11u1
purl pkg:deb/debian/trafficserver@8.1.10%2Bds-1~deb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4738-xk8n-hbac
1
vulnerability VCID-4hs3-be7k-9qe7
2
vulnerability VCID-4uhe-mtbx-nfdu
3
vulnerability VCID-5e1r-3jec-tkhp
4
vulnerability VCID-c62p-6ghw-j3dv
5
vulnerability VCID-eay7-63um-43e9
6
vulnerability VCID-esap-nkps-cfg9
7
vulnerability VCID-jabw-thzt-63bb
8
vulnerability VCID-jb1b-9gr2-suez
9
vulnerability VCID-kjah-am9e-xkev
10
vulnerability VCID-rcdg-j23x-xfbn
11
vulnerability VCID-rw58-bnwt-2bam
12
vulnerability VCID-tevw-8dcp-yfh6
13
vulnerability VCID-ww3t-p3pq-gkhy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@8.1.10%252Bds-1~deb11u1
1
url pkg:deb/debian/trafficserver@8.1.10%2Bds-1~deb11u1?distro=sid
purl pkg:deb/debian/trafficserver@8.1.10%2Bds-1~deb11u1?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4738-xk8n-hbac
1
vulnerability VCID-4hs3-be7k-9qe7
2
vulnerability VCID-4uhe-mtbx-nfdu
3
vulnerability VCID-5e1r-3jec-tkhp
4
vulnerability VCID-c62p-6ghw-j3dv
5
vulnerability VCID-eay7-63um-43e9
6
vulnerability VCID-kjah-am9e-xkev
7
vulnerability VCID-tevw-8dcp-yfh6
8
vulnerability VCID-ww3t-p3pq-gkhy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@8.1.10%252Bds-1~deb11u1%3Fdistro=sid
2
url pkg:deb/debian/trafficserver@9.2.5%2Bds-1
purl pkg:deb/debian/trafficserver@9.2.5%2Bds-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4738-xk8n-hbac
1
vulnerability VCID-4hs3-be7k-9qe7
2
vulnerability VCID-4uhe-mtbx-nfdu
3
vulnerability VCID-5e1r-3jec-tkhp
4
vulnerability VCID-c62p-6ghw-j3dv
5
vulnerability VCID-eay7-63um-43e9
6
vulnerability VCID-jabw-thzt-63bb
7
vulnerability VCID-kjah-am9e-xkev
8
vulnerability VCID-rcdg-j23x-xfbn
9
vulnerability VCID-tevw-8dcp-yfh6
10
vulnerability VCID-ww3t-p3pq-gkhy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.5%252Bds-1
3
url pkg:deb/debian/trafficserver@9.2.5%2Bds-1?distro=sid
purl pkg:deb/debian/trafficserver@9.2.5%2Bds-1?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4738-xk8n-hbac
1
vulnerability VCID-4hs3-be7k-9qe7
2
vulnerability VCID-4uhe-mtbx-nfdu
3
vulnerability VCID-5e1r-3jec-tkhp
4
vulnerability VCID-c62p-6ghw-j3dv
5
vulnerability VCID-eay7-63um-43e9
6
vulnerability VCID-jabw-thzt-63bb
7
vulnerability VCID-kjah-am9e-xkev
8
vulnerability VCID-rcdg-j23x-xfbn
9
vulnerability VCID-tevw-8dcp-yfh6
10
vulnerability VCID-ww3t-p3pq-gkhy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/trafficserver@9.2.5%252Bds-1%3Fdistro=sid
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-53868
reference_id
reference_type
scores
0
value 0.01774
scoring_system epss
scoring_elements 0.8271
published_at 2026-04-21T12:55:00Z
1
value 0.01774
scoring_system epss
scoring_elements 0.82706
published_at 2026-04-16T12:55:00Z
2
value 0.01774
scoring_system epss
scoring_elements 0.82707
published_at 2026-04-18T12:55:00Z
3
value 0.01774
scoring_system epss
scoring_elements 0.82618
published_at 2026-04-02T12:55:00Z
4
value 0.01774
scoring_system epss
scoring_elements 0.82632
published_at 2026-04-04T12:55:00Z
5
value 0.01774
scoring_system epss
scoring_elements 0.82628
published_at 2026-04-07T12:55:00Z
6
value 0.01774
scoring_system epss
scoring_elements 0.82654
published_at 2026-04-08T12:55:00Z
7
value 0.01774
scoring_system epss
scoring_elements 0.82662
published_at 2026-04-09T12:55:00Z
8
value 0.01774
scoring_system epss
scoring_elements 0.82679
published_at 2026-04-11T12:55:00Z
9
value 0.01774
scoring_system epss
scoring_elements 0.82673
published_at 2026-04-12T12:55:00Z
10
value 0.01774
scoring_system epss
scoring_elements 0.82669
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-53868
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53868
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53868
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101996
reference_id 1101996
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101996
3
reference_url https://lists.apache.org/thread/rwyx91rsrnmpjbm04footfjjf6m9d1c9
reference_id rwyx91rsrnmpjbm04footfjjf6m9d1c9
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-18T14:37:32Z/
url https://lists.apache.org/thread/rwyx91rsrnmpjbm04footfjjf6m9d1c9
Weaknesses
0
cwe_id 444
name Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
description The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.
Exploits
Severity_range_score7.5 - 7.5
Exploitability0.5
Weighted_severity6.8
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-eay7-63um-43e9