Request Smuggling Vulnerability in Varnish Cache by Varnish Software
CVE-2022-23959

9.1CRITICAL

Key Information:

Vendor: Varnish-software
Status: Varnich Cache; Varnish Cache; Varnish Cache Plus
Vendor: CVE Published:; 26 January 2022

🔔 Create Varnish-software Vulnerability Alert

What is CVE-2022-23959?

A vulnerability in Varnish Cache allows request smuggling on HTTP/1 connections, potentially leading to security risks associated with unauthorized command execution and manipulation of the underlying communication. This affects multiple versions, making it critical for administrators to apply the necessary updates to ensure system integrity.