CyberRota Analysis
AI-GeneratedRouille versions 0.3.3 to 3.6.2 are vulnerable to an HTTP request smuggling flaw that allows remote attackers to inject bare line feed characters into request headers, enabling them to bypass access controls. This vulnerability can lead to unauthorized access and manipulation of backend services, as crafted requests may be processed without proper validation. Organizations using affected versions of Rouille should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A) into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers can craft a header value containing a complete additional HTTP request that is interpreted as a separate request by backends such as Go net/http and Python http.server, causing the backend to process a smuggled request with attacker-chosen method, path, and headers that bypasses the rouille handler's access control logic.