Http

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Http records in CISA KEV

No Http vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

\ 2 records HIGH

Records

2 records in \ · all components

TI-2022-13125 CVE-2022-31081

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in HTTP::Daemon

HIGH 71

HTTP::Daemon is a simple http server class written in perl.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0235 Published 2022-06-27 Partial fix · 6.15 CWE-444

TI-2023-15093 CVE-2023-31486 · GHSA-g56r-phrf-6pc4

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on…

MEDIUM 41

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01742 Published 2023-04-28 Partial fix CWE-295

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0