CyberRota Analysis
AI-GeneratedA vulnerability exists in the handling of HTTP/1 authority-form CONNECT requests, which can be improperly translated into malformed HTTP/2 CONNECT requests due to a Host-controlled :authority header. This flaw can lead to potential denial-of-service attacks or unauthorized access to sensitive information. Organizations utilizing HTTP/2 in their web services should prioritize patching this issue to mitigate risks associated with exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leading to a malformed HTTP/2 CONNECT request. This can bypass security controls such as tunnel allow-lists or egress policies, resulting in integrity loss.