Executive brief
Request smuggling due to improper request handling in golang.org/x/net/http2/h2c
Affected products
- Go golang.org/x/net
Junglewise Threat Intelligence
CVE-2022-41721: GO-2023-1495 - Request smuggling due to improper request handling in golang.org/x/net/http2/h2c
CVE-2022-41721 · Severity: low · CVSS 3.1 · Published 2023-01-13
Technologies: golang.org/x/net (Go). Vendors: Go.
Related threats
- Google Go x/net denial of service in dnsmessage parsing
- Golang net/html Cross-Site Scripting via incorrect namespaced element parsing
- Google Go x/net/html XSS via incorrect foreign content parsing
- Go x/net idna privilege escalation via Punycode decoding
- Golang x/net/html XSS via duplicate attribute parsing