CVE-2024-32638
Apache APISIX: Forward-Auth Request Smuggling
Résumé
Apache APISIX: Forward-Auth Request Smuggling
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using forward-auth plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0.
Users are recommended to upgrade to version 3.8.1, 3.9.1 or higher, which fixes the issue.
Paquets affectés
Bitnami
apisix
[{"type":"SEMVER","events":[{"introduced":"3.8.0"},{"fixed":"3.9.1"}]}]
Références
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory github.com
- web openwall.com