CVE-2022-26377CWE-444

mod_proxy_ajp: Possible request smuggling

published June 8, 2022

CVSS

—

EPSS

21%

Percentile

97.6

In the wild

Unconfirmed

What it is

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.21079 · 97.6th percentile
Weakness: CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published: 2022-06-08T10:00Z

EPSS history

Timeline

08 JUN 10:00Z
mod_proxy_ajp: Possible request smuggling
cvelistv5