CVE-2022-22720

CVE-2022-22720: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Vendor Apache Software Foundation

Product Apache HTTP Server

Weakness CWE-444

Published March 14, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling

Key dates

02Disclosure timeline

March 14, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-22720 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/444.html AskarLabs — CWE-444 write-up Inconsistent Interpretation of HTTP Requests (Request Smuggling)