7.5

CVE-2025-59822

Exploit

Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls, launch targeted attacks against active users, and poison web caches. A pre-requisite for exploitation involves the web application being deployed behind a reverse-proxy that forwards trailer headers. This issue has been patched in versions 1.0.0-M45 and 0.23.31.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Typelevel ≫ Http4s Version < 0.23.31
Typelevel ≫ Http4s Version 1.0.0 Update milestone1
Typelevel ≫ Http4s Version 1.0.0 Update milestone10
Typelevel ≫ Http4s Version 1.0.0 Update milestone11
Typelevel ≫ Http4s Version 1.0.0 Update milestone12
Typelevel ≫ Http4s Version 1.0.0 Update milestone13
Typelevel ≫ Http4s Version 1.0.0 Update milestone14
Typelevel ≫ Http4s Version 1.0.0 Update milestone15
Typelevel ≫ Http4s Version 1.0.0 Update milestone16
Typelevel ≫ Http4s Version 1.0.0 Update milestone17
Typelevel ≫ Http4s Version 1.0.0 Update milestone18
Typelevel ≫ Http4s Version 1.0.0 Update milestone19
Typelevel ≫ Http4s Version 1.0.0 Update milestone2
Typelevel ≫ Http4s Version 1.0.0 Update milestone20
Typelevel ≫ Http4s Version 1.0.0 Update milestone21
Typelevel ≫ Http4s Version 1.0.0 Update milestone22
Typelevel ≫ Http4s Version 1.0.0 Update milestone23
Typelevel ≫ Http4s Version 1.0.0 Update milestone24
Typelevel ≫ Http4s Version 1.0.0 Update milestone25
Typelevel ≫ Http4s Version 1.0.0 Update milestone26
Typelevel ≫ Http4s Version 1.0.0 Update milestone27
Typelevel ≫ Http4s Version 1.0.0 Update milestone28
Typelevel ≫ Http4s Version 1.0.0 Update milestone29
Typelevel ≫ Http4s Version 1.0.0 Update milestone3
Typelevel ≫ Http4s Version 1.0.0 Update milestone30
Typelevel ≫ Http4s Version 1.0.0 Update milestone31
Typelevel ≫ Http4s Version 1.0.0 Update milestone32
Typelevel ≫ Http4s Version 1.0.0 Update milestone33
Typelevel ≫ Http4s Version 1.0.0 Update milestone34
Typelevel ≫ Http4s Version 1.0.0 Update milestone35
Typelevel ≫ Http4s Version 1.0.0 Update milestone36
Typelevel ≫ Http4s Version 1.0.0 Update milestone37
Typelevel ≫ Http4s Version 1.0.0 Update milestone38
Typelevel ≫ Http4s Version 1.0.0 Update milestone39
Typelevel ≫ Http4s Version 1.0.0 Update milestone4
Typelevel ≫ Http4s Version 1.0.0 Update milestone40
Typelevel ≫ Http4s Version 1.0.0 Update milestone41
Typelevel ≫ Http4s Version 1.0.0 Update milestone42
Typelevel ≫ Http4s Version 1.0.0 Update milestone43
Typelevel ≫ Http4s Version 1.0.0 Update milestone44
Typelevel ≫ Http4s Version 1.0.0 Update milestone5
Typelevel ≫ Http4s Version 1.0.0 Update milestone6
Typelevel ≫ Http4s Version 1.0.0 Update milestone7
Typelevel ≫ Http4s Version 1.0.0 Update milestone8
Typelevel ≫ Http4s Version 1.0.0 Update milestone9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.267
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
security-advisories@github.com 6.3 0 0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

https://github.com/http4s/http4s/commit/dd518f7c967e5165813b8d4a48a82b8fab852d41
Patch
https://github.com/http4s/http4s/security/advisories/GHSA-wcwh-7gfw-5wrr
Vendor Advisory
Exploit