Yüksek CVSS 7.5
CVE-2026-78660: CVE-2026-78660: güvenlik açığı
Açıklama (NVD)
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a reverse proxy. If the HTTP/1 client also does not behave strictly enough, this can result in response smuggling.
Özet bilgiler
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - EPSS
- %0,43 (yüzdelik 37)
- CWE
- CWE-444
- Yama
- Yok / bilinmiyor