Request Smuggling

ADD Request smuggling to VRT: Varies - Server Security Misconfiguration - HTTP Request Smuggling
bugcrowd · Jun 25, 2023 · 9ed0b52 · 9ed0b52
1 parent 48d97a2
commit 9ed0b52
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/mappings/cvss_v3/cvss_v3.json b/mappings/cvss_v3/cvss_v3.json
@@ -10,6 +10,10 @@
           "id": "unsafe_cross_origin_resource_sharing",
           "cvss_v3": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N"
         },
+        {
+          "id": "unsafe_cross_origin_resource_sharing",
+          "cvss_v3": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+        },
         {
           "id": "path_traversal",
           "cvss_v3": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"

diff --git a/mappings/cwe/cwe.json b/mappings/cwe/cwe.json
@@ -11,6 +11,10 @@
           "id": "unsafe_cross_origin_resource_sharing",
           "cwe": ["CWE-942"]
         },
+        {
+          "id": "request_smuggling",
+          "cwe": ["CWE-444"]
+        },
         {
           "id": "path_traversal",
           "cwe": ["CWE-22", "CWE-73"]