vulnerability

FreeBSD: VID-b0c83e1a-8153-11ec-84f9-641c67a117d8 (CVE-2022-23959): varnish -- Request Smuggling Vulnerability

Try Surface Command
Back to search
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
Jan 29, 2022
Added
Nov 4, 2022
Modified
Dec 10, 2025

Description

Varnish Cache Project reports: A request smuggling attack can be performed on HTTP/1 connections on Varnish Cache servers. The smuggled request would be treated as an additional request by the Varnish server, go through normal VCL processing, and injected as a spurious response on the client connection.

Solutions

freebsd-upgrade-package-varnish6freebsd-upgrade-package-varnish4

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today