CyberzSOC

These vulnerabilities can lead to HTTP request smuggling and SSL client authentication bypass, potentially resulting in unauthorised access and other malicious activities [1]. It is recommended to update affected systems immediately. allows source code disclosure via certain legacy content-type-based configuration settings. Exploitation of these vulnerabilities could allow attackers to gain unauthorised access, perform session hijacking, cross-site scripting (XSS), or command injection. More information about the attack method can be found here [2]. An open-source vulnerability checker is available on github [3].