← Database

CVE-2022-22720

CRITICAL CVSS: 9.8 Published: 2022-03-14 Modified: 2026-06-17

Description

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Affected Platforms

Oracle Http ServerApache Http ServerFedoraproject FedoraApple Mac Os XDebian Debian LinuxOracle Zfs Storage Appliance KitOracle Enterprise Manager Ops CenterApple Macos

Weakness Type

CWE-444, CWE-444

References