← All credits

Sebastiano Sartor

2 vulnerability records and advisories credit this contributor.

Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request

Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveraged to perform HTTP request smuggling. Grizzly 5.0.1 supports system properties that enable the behavior that fixes