Vulnerability Database

296,138

Total vulnerabilities in the database

CVE-2022-36760

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

  • Published: Jan 17, 2023
  • Updated: Sep 9, 2023
  • CVE: CVE-2022-36760
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9
  • AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CWEs:

Software From Fixed in
apache / http_server 2.4.0 2.4.55