Description
lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks. Successful exploitation may allow an attacker to: * Bypass access control rules * Inject unsafe input into backend logic that trusts request headers * Execute HTTP Request Smuggling attacks under some conditions This issue affects lighttpd1.4.80
Remediation
References
Related Vulnerabilities
MySQL CVE-2022-21342 Vulnerability (CVE-2022-21342)
WordPress Plugin RSS for Yandex Turbo Cross-Site Scripting (1.29)
WordPress Plugin Simple Post Cross-Site Scripting (1.1)
Apache Tomcat Improper Authentication Vulnerability (CVE-2012-5886)
Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-0114)