CVE-2022-26377
mod_proxy_ajp: Possible request smuggling
- State
- Published
- Severity
- Not scored
- Published
- Jun 8, 2022
- Updated
- Aug 3, 2024
- Reserved
- Mar 3, 2022
Description
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.
Scores
The record has no CVSS score.
Weaknesses
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
Affected Products
| Product | Versions |
|---|---|
Apache HTTP ServerApache Software Foundation |
|
References
- https://httpd.apache.org/security/vulnerabilities_24.html
- [oss-security] 20220608 CVE-2022-26377: Apache HTTP Server: mod_proxy_ajp: Possible request smugglingmailing-list
- https://security.netapp.com/advisory/ntap-20220624-0005/
- FEDORA-2022-e620fb15d5vendor-advisory
- FEDORA-2022-b54a8dee29vendor-advisory
- GLSA-202208-20vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.