Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-36760

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

Published

2023-01-17T20:15:11.580

Last Modified

2025-04-04T18:15:41.907

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.0 (CRITICAL)

Weaknesses

Type: Secondary
CWE-444
Type: Secondary
CWE-444

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	apache	http_server	< 2.4.55	Yes

References

https://httpd.apache.org/security/vulnerabilities_24.html Mailing List, Vendor Advisory ([email protected])
https://security.gentoo.org/glsa/202309-01 ([email protected])
https://httpd.apache.org/security/vulnerabilities_24.html Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/202309-01 (af854a3a-2127-422b-91ae-364da2661108)