CVE-2020-7658

Published May 22nd, 2020

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing.

mopemope/meinheld

Meinheld is a high performance asynchronous WSGI Web Server (based on picoev)

GitHub

1.46K