CVE-2020-7670 | BDVDB-2026-137140 Detail

Description#

agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks where `agoo` is used as part of a chain of backend servers due to insufficient `Content-Length` and `Transfer Encoding` parsing.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-06-10Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.