Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27274
HistorySep 29, 2020 - 3:37 a.m.

HTTP Request Smuggling

2020-09-2903:37:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.01 Low

EPSS

Percentile

83.8%

squid is vulnerable to HTTP request smuggling. An attacker is able to successfully perform request smuggling and poisoning attack against the HTTP cache by sending an HTTP request with a Content-Length header containing +\ "- or an uncommon shell whitespace character prefix to the length field-value.