meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling
published May 22, 2020
CVSS
—
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00686 · 52.1th percentile
Published
2020-05-22T15:48Z
EPSS history
Timeline
22 MAY 15:48Z
meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling