Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-27522

Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

Description

HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache HTTP Server

Default version status: unaffected

  • 2.4.30 to ≤ 2.4.55affected

References