Skip to content
OpenAdvisories

Archive

16 September 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2021-39214 Public exploit

    Lacking Protection against HTTP Request Smuggling in mitmproxy

    mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/…

  • Critical 9.0
    CVE-2021-40438 Exploited · Ransomware Public exploit EPSS 100%

    mod_proxy SSRF

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

    KEV Dec 1, 2021