Home

Description

lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks. Successful exploitation may allow an attacker to: * Bypass access control rules * Inject unsafe input into backend logic that trusts request headers * Execute HTTP Request Smuggling attacks under some conditions This issue affects lighttpd1.4.80

PUBLISHED Reserved 2025-11-03 | Published 2025-11-03 | Updated 2025-11-03 | Assigner Toreon




MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Problem types

CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Product status

Default status
unaffected

1.4.80 (custom) before 1.4.81
affected

Credits

Sebastiano Sartor <@sebsrt> finder

References

github.com/...ommit/35cb89c103877de62d6b63d0804255475d77e5e1

cve.org (CVE-2025-12642)

nvd.nist.gov (CVE-2025-12642)

Download JSON