CVE-2022-23959

CRITICAL · CVSS 9.1 EPSS 1.97%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-01-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-23959

Severity

CRITICAL

CVSS

9.1

EPSS

1.97%

Original NVD Description

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.