目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-444 HTTP请求的解释不一致性(HTTP请求私运) 类漏洞列表 240

CWE-444 HTTP请求的解释不一致性(HTTP请求私运) 类弱点 240 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-444指HTTP请求/响应走私漏洞，属于中间件解释不一致型缺陷。当代理或防火墙与后端服务器对畸形HTTP消息解析逻辑不同时，攻击者可利用此差异构造恶意请求，绕过安全控制或劫持用户会话。开发者应避免使用存在解析歧义的中间件，确保所有HTTP组件采用统一的解析标准，并严格校验请求边界，以消除解释不一致的风险。

MITRE CWE 官方描述
CWE：CWE-444 HTTP 请求解释不一致（'HTTP 请求/响应走私'） 该产品在数据流中充当两个实体（如客户端和服务器）之间的中间 HTTP 代理（例如代理服务器或防火墙），但它未能以与最终目的地实体处理消息的方式一致的方式来解释格式错误的 HTTP 请求或响应。 HTTP 请求或响应（“消息”）可能以导致 Web 服务器或客户端与中间 HTTP 代理（如负载均衡器、反向代理、Web 缓存代理、应用防火墙等）以不同方式解释这些消息的方式出现格式错误或意外情况。例如，攻击者可能能够添加重复或不同的头部字段，客户端或服务器可能将其解释为一组消息，而中间代理可能将相同的字节序列解释为另一组不同的消息。例如，在处理重复头部（如两个 Transfer-encoding (TE) 或两个 Content-length (CL)）时可能会出现差异，或者恶意的 HTTP 消息中 TE 和 CL 的头部不同。消息解析和解释的不一致可能允许攻击者将消息“走私”到客户端/服务器，而中间代理对此毫无察觉。这种弱点通常是由于 HTTP 代理中使用了过时或不兼容的 HTTP 协议版本所致。
常见影响 (1)
Integrity, Non-Repudiation, Access Control Unexpected State, Hide Activities, Bypass Protection Mechanism
An attacker could create HTTP messages to exploit a number of weaknesses including 1) the message can trick the web server to associate a URL with another URL's webpage and caching the contents of the webpage (web cache poisoning attack), 2) the message can be structured to bypass the firewall prote…
缓解措施 (4)
Implementation Use a web server that employs a strict HTTP parsing procedure, such as Apache [REF-433].
Implementation Use only SSL communication.
Implementation Terminate the client session after each request.
System Configuration Turn all pages to non-cacheable.
代码示例 (2)
In the following example, a malformed HTTP request is sent to a website that includes a proxy server and a web server with the intent of poisoning the cache to associate one webpage with another malicious webpage.
POST http://www.website.com/foobar.html HTTP/1.1 Host: www.website.com Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Content-Length: 0 Content-Length: 54 GET /poison.html HTTP/1.1 Host: www.website.com Bla: GET http://www.website.com/page_to_poison.html HTTP/1.1 Host: www.website.com Connection: Keep-Alive
Attack
GET /poison.html HTTP/1.1 Host: www.website.com Bla:
Result
In the following example, a malformed HTTP request is sent to a website that includes a web server with a firewall with the intent of bypassing the web server firewall to smuggle malicious code into the system.
POST /page.asp HTTP/1.1 Host: www.website.com Connection: Keep-Alive Content-Length: 49223 zzz...zzz ["z" x 49152] POST /page.asp HTTP/1.0 Connection: Keep-Alive Content-Length: 30 POST /page.asp HTTP/1.0 Bla: POST /page.asp?cmd.exe HTTP/1.0 Connection: Keep-Alive
Attack
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-88009 Traefik 无根HTTP请求路径转发绕过漏洞 — traefik 8.8 High 2026-09-10
CVE-2026-88008 Traefik 请求走私及授权错误漏洞 — traefik 7.0 High 2026-09-10
CVE-2026-81356 Visual Studio Code 安全特性绕过漏洞 — Visual Studio Code 8.2 High 2026-09-08
CVE-2026-19203 Eclipse Jetty 输入验证错误漏洞 — Eclipse Jetty 8.3 High 2026-09-08
CVE-2026-18540 undici 输入验证错误漏洞 — undici 3.7 Low 2026-09-04
CVE-2026-84380 Pydantic HTTPX2 输入验证错误漏洞 — httpx2 5.6 Medium 2026-09-02
CVE-2026-84363 Hono 输入验证错误漏洞 — hono 5.9 Medium 2026-09-01
CVE-2026-78605 Elastic Elasticsearch 输入验证错误漏洞 — Elasticsearch 5.9 Medium 2026-09-01
CVE-2026-73812 Erlang/OTP 输入验证错误漏洞 — OTP 8.3 High 2026-09-01
CVE-2026-73276 Erlang/OTP 输入验证错误漏洞 — OTP 8.3 High 2026-09-01
CVE-2026-66357 Erlang/OTP 输入验证错误漏洞 — OTP 8.3 High 2026-09-01
CVE-2026-48932 Node.js 输入验证错误漏洞 — node - - 2026-09-01
CVE-2026-74848 Apache APISIX 输入验证错误漏洞 — Apache APISIX 7.0 High 2026-08-27
CVE-2026-75922 Perl Reverse::Proxy 0.04以下版本 HTTP请求走私漏洞 - - 2026-08-23
CVE-2026-63385 Libevent 输入验证错误漏洞 — libevent 9.2 Critical 2026-08-20
CVE-2026-63379 libevent 输入验证错误漏洞 — libevent 6.3 Medium 2026-08-20
CVE-2026-63382 Libevent 输入验证错误漏洞 — libevent 9.2 Critical 2026-08-20
CVE-2026-73256 Cesanta Mongoose 输入验证错误漏洞 — mongoose 9.1 Critical 2026-08-20
CVE-2026-73257 Cesanta Mongoose 输入验证错误漏洞 — mongoose 9.1 Critical 2026-08-20
CVE-2026-73051 Actix Web 输入验证错误漏洞 — actix-web 6.3 Medium 2026-08-14
CVE-2026-73495 http4s blaze 输入验证错误漏洞 — blaze 7.4 High 2026-08-12
CVE-2026-62899 Microsoft .NET 输入验证错误漏洞 — .NET 10.0 5.9 Medium 2026-08-11
CVE-2026-14180 Undertow 输入验证错误漏洞 — Red Hat build of Apache Camel for Spring Boot 4 5.3 Medium 2026-08-11
CVE-2026-72587 CoreBunch Instatic 输入验证错误漏洞 — Instatic 6.1 Medium 2026-08-10
CVE-2026-71554 python-hyper h2 输入验证错误漏洞 — h2 5.3 Medium 2026-08-06
CVE-2026-71324 Traefik 输入验证错误漏洞 — traefik 7.0 High 2026-08-06
CVE-2026-9190 Progress MarkLogic Server 输入验证错误漏洞 — MarkLogic Server 9.1 Critical 2026-08-05
CVE-2026-58044 nodejs node 输入验证错误漏洞 — node - - 2026-08-04
CVE-2026-69243 aio-libs Async http client/server framework 输入验证错误漏洞 — aiohttp 6.3 Medium 2026-08-03
CVE-2026-58047 WebPros cPanel 输入验证错误漏洞 — cPanel 5.6 Medium 2026-07-31

CWE-444（HTTP请求的解释不一致性(HTTP请求私运)） 是常见的弱点类别，本平台收录该类弱点关联的 240 条 CVE 漏洞。