0xleft/CVE-2019-20372

PoC

nginx http request smugling error_page directive

view exploit source poc_in_githubauthor 0xleftpublished 2023-09-16catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-20372US	medium5.3	15.0% (97th)	Exploit	2020-01-09
NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environm…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.