HistoryEdit

RUSTSEC-2020-0031

HTTP Request smuggling through malformed Transfer Encoding headers

Issued
Package
tiny_http (crates.io)
Type
Vulnerability
Keywords
#http #request-smuggling
Aliases
Details
https://github.com/tiny-http/tiny-http/issues/173
CVSS Score
6.5 MEDIUM
CVSS Details
Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Patched
  • >=0.8.0
  • ^0.6.3
Keywords
#http #request-smuggling

Description

HTTP pipelining issues and request smuggling attacks are possible due to incorrect Transfer encoding header parsing.

It is possible conduct HTTP request smuggling attacks (CL:TE/TE:TE) by sending invalid Transfer Encoding headers.

By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.