GitHub Advisoryadvisory · RubyGems

GHSA-3892-2r52-p65m HTTP Request Smuggling in goliath

HIGH Published 2021-05-24 Modified 2023-01-25 Official page ↗
Aliases
CVE-2020-7671
Ecosystem
RubyGems
Packages
goliath
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-444
Reviewed
2021-05-13

Affected packages

• RubyGems goliath: <= 1.0.6 (no fix yet)

Description

goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as valid which could be leveraged for TE:CL smuggling attacks.

Related

Alias · CVE (1)

  • CVE-2020-7671 goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. vulnerability

Weakness · CWE (1)

  • CWE-444 Inconsistent Interpretation of HTTP Requests weakness

References