dom96 / jester

A sinatra-like web framework for Nim.
MIT License
1.56k stars 120 forks source link

[security issue] http 1.1 request smuggling #326

Closed anas-cherni closed 7 months ago

anas-cherni commented 7 months ago

Vulnerability Details: 1) Products: HttpBeast, Jester 2) Tested Version: latest versions 3) Vulnerability: Http 1.1 request smuggling 4) PoC:

image

import jester

routes:
  get "/":
    resp "Hello world"

runForever()

5) Impact: It is feasible to surreptitiously introduce a malicious request, leading to a disruption in the user experience. This vulnerability may result in various impacts such as Session Hijacking, Privilege Escalation, cache poisoning, and Denial of Service (DoS). Additionally, Self-XSS has the potential to escalate into a more severe Cross-Site Scripting (XSS) attack. In a broader context, this vulnerability can be interconnected with other vulnerabilities, amplifying their overall severity.

dom96 commented 7 months ago

See https://github.com/dom96/httpbeast/issues/95