GHSA-xrr9-rh8p-433vLowCVSS 5.4

Request smuggling is possible when both chunked TE and content length specified

Published
January 27, 2020
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2020-5207 →

📋 Description

Impact

Request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle alone \n as a headers separator.

Patches

https://github.com/ktorio/ktor/pull/1547

Workarounds

None except migrating to a better proxy.

References

https://portswigger.net/web-security/request-smuggling https://tools.ietf.org/html/rfc7230#section-9.5

🎯 Affected products2

  • maven/io.ktor:ktor-client-cio:< 1.3.0
  • maven/io.ktor:ktor-server-cio:< 1.3.0

🔗 References (4)