Vulnerability CVE-2022-29361


Published: 2022-05-25

Description:
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body.

 References:
https://github.com/pallets/werkzeug/commit/9a3a981d70d2e9ec3344b5192f86fcaf3210cd85

Copyright 2022, cxsecurity.com

 

Back to Top