PT-2020-19699 · Goliath · Goliath
Published
2020-06-10
·
Updated
2021-05-24
·
CVE-2020-7671
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Goliath versions 1.0.0 through 1.0.6
Description
The issue allows request smuggling attacks when Goliath is used as a backend and a frontend proxy is also vulnerable. This can be achieved by sending the
Content-Length header twice, enabling HTTP request smuggling attacks. Additionally, invalid Transfer Encoding headers are parsed as valid, which can be leveraged for TE:CL smuggling attacks.Recommendations
For Goliath versions 1.0.0 through 1.0.6, consider restricting the use of the
Content-Length header and ensure proper validation of Transfer Encoding headers to minimize the risk of exploitation. As a temporary workaround, restrict access to the vulnerable proxy setup until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.HTTP Request/Response Smuggling
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Goliath