Loading vulnerability…
HTTP response smuggling in Apache HTTP Server mod_proxy_uwsgi
CVE-2023-27522 is an HTTP response smuggling, also described as response splitting, vulnerability in Apache HTTP Server's mod_proxy_uwsgi module. It affects versions 2.4.30 through 2.4.55. Special characters in an origin server's response header can cause the module to truncate or split the response forwarded to a client. Apache HTTP Server 2.4.56 fixes the vulnerability.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Exploitation can compromise the integrity of proxied HTTP responses by causing them to be truncated or split before delivery to clients. Specific confidentiality, availability, or code-execution consequences are not established for this vulnerability.
If you can’t patch tonight, do this now.
Apply the available Apache HTTP Server vendor updates. No product-specific workaround is identified in the available information.
Patch, then assume compromise.
Upgrade Apache HTTP Server to version 2.4.56 or later, or install the applicable vendor-supported package update containing the fix. Red Hat JBoss Core Services users can apply the Apache HTTP Server 2.4.57 updates delivered through RHSA-2023:4628 or RHSA-2023:4629. For Rocky Linux 9.2 under CIQ LTS 9.2, update affected httpd packages according to ciqsa-2026_1626.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.