Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2024-32638

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using forward-auth plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0.

Users are recommended to upgrade to version 3.8.1, 3.9.1 or higher, which fixes the issue.

  • Published: May 2, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-32638
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWEs:

Software From Fixed in
apache / apisix 3.8.0 3.8.0.x
apache / apisix 3.9.0 3.9.0.x