CVE-2020-7655

netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling

published May 21, 2020

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Transfer encoding header parsing which could allow for CL:TE or TE:TE attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00839 · 57.4th percentile
Published
2020-05-21T14:15Z
EPSS history
Timeline
  • 21 MAY 14:15Z
    netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling
    cvelistv5