CVE-2018-21245

Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2020-06-15

Last modified

2024-08-05

Weaknesses

CWE-444

Affected products

• Pound (Apsis)

References

• https://admin.hostpoint.ch/pipermail/pound_apsis.ch/2018-May/000054.html
• https://bugs.gentoo.org/714084