cve/2021/CVE-2021-22959.md
2024-05-25 21:48:12 +02:00

720 B

CVE-2021-22959

Description

The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS) in llhttp < v2.1.4 and < v6.0.6.

POC

Reference

Github

No PoCs found on GitHub currently.