← Database

CVE-2022-23959

CRITICAL CVSS: 9.1 Published: 2022-01-26 Modified: 2026-06-17

Description

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.

Affected Platforms

Varnish-Software Varnish CacheFedoraproject FedoraVarnish-Software Varnish Cache PlusDebian Debian LinuxVarnish Cache Project Varnish CacheVarnish-Software Varnich Cache

Weakness Type

CWE-444

References