HTTP Request Smuggling

2019-12-2307:27:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.2%

JSON

waitress is vulnerable HTTP request smuggling. The vulnerability exists because the library mishandled HTTP request header by not correctly parsing the Transfer-Encoding header, causing the parser to use Content-Length header instead to determine the HTTP message body size, ignoring the requests that are sent with Transfer-Encoding: gzip, chunked and treating single request as multiple requests in the case of HTTP pipelining.

CPENameOperatorVersion
waitressle1.3.1
py3-waitress:3.11eq1.3.1-r2
python-waitresseq1.2.1__2.el8.1
python-waitresseq1.2.1__2.epel8.playground.1
python-waitresseq0.8.10__2.el8ost
waitressle1.3.1
py3-waitress:3.11eq1.3.1-r2
python-waitresseq1.2.1__2.el8.1
python-waitresseq1.2.1__2.epel8.playground.1
python-waitresseq0.8.10__2.el8ost

Name	Operator	Version
waitress	le	1.3.1
py3-waitress:3.11	eq	1.3.1-r2
python-waitress	eq	1.2.1__2.el8.1
python-waitress	eq	1.2.1__2.epel8.playground.1
python-waitress	eq	0.8.10__2.el8ost
waitress	le	1.3.1
py3-waitress:3.11	eq	1.3.1-r2
python-waitress	eq	1.2.1__2.el8.1
python-waitress	eq	1.2.1__2.epel8.playground.1
python-waitress	eq	0.8.10__2.el8ost