cve/2024/CVE-2024-30156.md
2024-05-25 21:48:12 +02:00

713 B

CVE-2024-30156

Description

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

POC

Reference

No PoCs from references.

Github