cve/2019/CVE-2019-20372.md

CVE-2019-20372

Description

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

POC

Reference

• http://seclists.org/fulldisclosure/2021/Sep/36

Github

• https://github.com/0xleft/CVE-2019-20372
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ChiomaDibor/Vulnerability-Management-of-a-Web-Server-Using-Nessus-and-Patch-Management-with-Ansible
• https://github.com/Cybervixy/Vulnerability-Management
• https://github.com/Deeoojo/Vulnerability-Management-Nessus-Ansible-
• https://github.com/Dorakhris/Vulnerability-Assessment-lab
• https://github.com/Maissacrement/cyber_sec_master_spv
• https://github.com/Oju-kwu/Vulnerability-Management-Lab
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Teedico/Nessus_Vulnerability_Assessment
• https://github.com/brunsu/woodswiki
• https://github.com/chrisaondo/Vulnerability-Assessment
• https://github.com/emo-crab/slinger
• https://github.com/ginoah/My-CTF-Challenges
• https://github.com/moften/CVE-2019-20372
• https://github.com/rmtec/modeswitcher
• https://github.com/vigneshsb403/nginx0-HTTP-smugging
• https://github.com/vuongnv3389-sec/CVE-2019-20372
• https://github.com/web-security-2023-2/code-web
• https://github.com/woods-sega/woodswiki