Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:NVarnish Cache Project Varnish Cache
APPVarnish Cache Project< 7.6.2Varnish Software Varnish Enterprise
APPVarnish-Software6.0.116.0.126.0.13
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2022-23959CRITICAL9.1ten sam produkt
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enter...
CVE-2017-8807CRITICAL9.1ten sam produkt
vbf_stp_error in bin/varnishd/cache/cache_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2....
CVE-2022-45059HIGH7.5ten sam produkt
An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1. A request smuggling attack c...
CVE-2022-45060HIGH7.5ten sam produkt
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and...
CVE-2022-38150HIGH7.5ten sam produkt
In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and auto...