Lighttpd

2024-06-18

06:29 Development: RE: Lighttpd allows SP octets within HTTP/1.1 request targets

As with your previous recent reports, the bug appears to me to be in those gateway servers which are sending an *inva... gstrauss

2024-06-17

18:13 Development: [Solved] Lighttpd allows SP octets within HTTP/1.1 request targets

Lighttpd accepts HTTP/1.1 requests with spaces in origin form request targets. This allows for cache poisoning under ... kenballus