CVE-2024-6827 Details
Description
Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.
A request smuggling vulnerability has been identified in Gunicorn version 21.2.0. The issue arises because the server does not correctly validate the 'Transfer-Encoding' header in accordance with RFC standards. This flaw allows the server to default to the 'Content-Length' method, creating a vulnerability to TE.CL (Transfer-Encoding to Content-Length) request smuggling. Exploiting this vulnerability can lead to various security issues, including cache poisoning, data exposure, session manipulation, server-side request forgery (SSRF), cross-site scripting (XSS), denial-of-service (DoS), data integrity compromise, security bypass, information leakage, and abuse of business logic.
Gunicorn version 23.0.0 and later have addressed this vulnerability. Users should upgrade to the latest version.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 20, 2025CISA-ADP
Assessed Mar 20, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://huntr.com/bounties/1b4f8f38-39da-44b6-9f98-f618639d0dd7 | [email protected] | ExploitTechnical Description |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| benoitc/gunicorn | 21.2.0 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 20, 2025 | New CVE Received | [email protected] |