HackerOne Bug Bounty Disclosure: http-request-smuggling-with-origin-rules-using-newlines-in-the-host_header-action-parameterbyalbertspedersen

June 27, 2022

Programme

HackerOne

  • Cloudflare Public Bug Bounty



Cloudflare Public Bug Bounty

Submitted by

  • albertspedersen



albertspedersen

Report

HTTP request smuggling with Origin Rules using newlines in the host_header action parameter

Full Report

You may have missed

CISA Logo

CISA: CISA Releases Six Industrial Control Systems Advisories

September 19, 2024
c061da9b5afd7dd0d3a8f6785766e5fa67415843ac0b584161d498c33508133d

Mass-Assigner – Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests

September 19, 2024
c061da9b5afd7dd0d3a8f6785766e5fa67415843ac0b584161d498c33508133d

Mass-Assigner – Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests

September 19, 2024
f17f401746fec6341d2cc6c8f403d2957baee627fb1253003663742581d5c16d

BYOSI – Evade EDR’s The Simple Way, By Not Touching Any Of The API’s They Hook

September 19, 2024
f17f401746fec6341d2cc6c8f403d2957baee627fb1253003663742581d5c16d

BYOSI – Evade EDR’s The Simple Way, By Not Touching Any Of The API’s They Hook

September 19, 2024