Skip to content
OpenAdvisories

Archive

22 January 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.1

    HTTP Request Smuggling: Content-Length Sent Twice in Waitress

    Waitress through version 1.3.1 allows request smuggling by sending the Content-Length header twice. Waitress would header fold a double Content-Length header and due to being unable to cast the now comma separated value to an integer would set the Content-Len…