Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as     specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it     vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure,     session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and     business logic abuse. (CVE-2024-6827)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1008-1 advisory.

    - CVE-2024-6827: Fixed improper validation of the 'Transfer-Encoding' header value can allow for HTTP     request smuggling attacks (bsc#1239830)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1002-1 advisory.

    - CVE-2024-6827: Fixed improper validation of the 'Transfer-Encoding' header value can allow for HTTP     request smuggling attacks (bsc#1239830)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as
    specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it
    vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure,
    session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and
    business logic abuse. (CVE-2024-6827)

ID	Name	Product	Family	Type	Severity
244919	Linux Distros Unpatched Vulnerability : CVE-2024-6827	Nessus	Misc.	Local	high
233344	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-gunicorn (SUSE-SU-2025:1008-1)	Nessus	SuSE Local Security Checks	Local	high
233343	SUSE SLES15 Security Update : python-gunicorn (SUSE-SU-2025:1002-1)	Nessus	SuSE Local Security Checks	Local	high
421209	SCA: security update for gunicorn (GHSA-hc5x-x2vx-497g)	Tenable Cloud Security	SCA Checks	Local	high
421209	SCA: security update for gunicorn (GHSA-hc5x-x2vx-497g)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2024-6827

high

Tenable Plugins

high

high

high

high

high