l3ragio/CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS

PoC

l3ragio/CVE-2022-29361_Werkzeug_Client-Side-Desync-to-XSS

view exploit source poc_in_githubauthor l3ragiopublished 2023-11-25catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-29361UScritical9.8Exploit
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests includ…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan