CVE-2020-7670
N/A
N/A
Summary
agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks where agoo is used as part of a chain of backend servers due to insufficient Content-Length and Transfer Encoding parsing.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | agoo | versions prior to 2.14.0 | affected |
Weaknesses
- HTTP Request Smuggling
ADP Enrichment
CVE Program Container
Additional References
- https://snyk.io/vuln/SNYK-RUBY-AGOO-569137
- https://github.com/ohler55/agoo/issues/88
- https://github.com/ohler55/agoo/commit/23d03535cf7b50d679a60a953a0cae9519a4a130
References
- https://snyk.io/vuln/SNYK-RUBY-AGOO-569137
- https://github.com/ohler55/agoo/issues/88
- https://github.com/ohler55/agoo/commit/23d03535cf7b50d679a60a953a0cae9519a4a130
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.