Detections
Analytics
CVE-2024-52530
high
Description
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.
References
https://lists.debian.org/debian-lts-announce/2024/12/msg00014.html
https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home