http 1.1 request smuggling
anas-cherni opened this issue · comments
Vulnerability Details:
- Products: HttpBeast, Jester
- Tested Version: latest versions
- Vulnerability: Http 1.1 request smuggling
- PoC:
import jester
routes:
get "/":
resp "Hello world"
runForever()
- Impact:
It is feasible to surreptitiously introduce a malicious request, leading to a disruption in the user experience. This vulnerability may result in various impacts such as Session Hijacking, Privilege Escalation, cache poisoning, and Denial of Service (DoS). Additionally, Self-XSS has the potential to escalate into a more severe Cross-Site Scripting (XSS) attack. In a broader context, this vulnerability can be interconnected with other vulnerabilities, amplifying their overall severity.
The library right now expects to be put behind a reverse proxy which will protect against these kinds of issues. There is a lot of hardening required against these types of issues before you can run it on the open internet.