Skip to content
Threat Feed
Subscribe

Product

Tornado (< 6.3.3)

1 brief RSS
high advisory

HTTP Request Smuggling Vulnerability in Tornado

Tornado versions prior to 6.4.1 are vulnerable to HTTP request smuggling via the improper processing of duplicate 'Transfer-Encoding: chunked' headers when deployed behind a proxy.

Tornado +1 web-application http-request-smuggling vulnerability request-smuggling
3t 1c updated