Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-52530

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.

Published

2024-11-11T20:15:20.247

Last Modified

2025-11-03T23:17:14.843

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-444
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gnome libsoup < 3.6.0 Yes
References