Back

CRITICAL

HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Published Mar 14, 2022

Description

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Affected products

Remediation

Red Hat mitigation

There are currently no known mitigations for this issue.

Metrics

Weaknesses (1)

References (21)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apache
Published Mar 14, 2022
Updated Aug 3, 2024
Reserved Jan 6, 2022
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Important
Public date Mar 14, 2022