title: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
description: Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
problem types: CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 2.4.52, status: affected, version: Apache HTTP Server 2.4, versionType: custom
}
metrics:
other: [
content: {'other': 'important'}
type: unknown
]