CVE-2023-46846 — Squid: request/response smuggling in http/1.1 and icap
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend secu…
Published: 2023-11-03 · CVSS: 9.3 · CVSS 3.1
SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7