Threats tagged 'ghsa-2fc8-vf8h-jfvw'

IBM WebSphere Application Server versions 9.0, 8.5, and Liberty are affected by an HTTP request smuggling vulnerability due to improper parsing of the HTTP transfer-encoding header. This flaw allows attackers to send specially crafted requests that can poison web caches, bypass web application firewalls, and enable cross-site scripting (XSS) attacks. The vulnerability has a medium severity rating with a CVSS score of 6.5. No patch or remediation information is provided in the available data.