Read the docs
Red Hat Security Advisory

RHSA-2024:4054

Red Hat OpenStack Platform 16.2 (python-gunicorn) security update

Released 2024-06-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2024-01052 CVE-2024-1135 · GHSA-w3h3-4rj7-4ph4

HTTP Request Smuggling in benoitc/gunicorn

Priority MEDIUM 46

Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02996 Published 2024-04-16 Partial fix · 22.0.0 CWE-444