Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-7670 1 Ohler 1 Agoo 2024-11-21 7.5 High
agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks where `agoo` is used as part of a chain of backend servers due to insufficient `Content-Length` and `Transfer Encoding` parsing.