CVE-2024-33452

Summary

CVE-2024-33452 is a vulnerability affecting OpenResty's lua-nginx-module version 0.10.26 and earlier. This issue permits a remote attacker to carry out HTTP request smuggling using a specially crafted HEAD request. By exploiting this vulnerability, an attacker can potentially inject malicious HTTP requests into the server, leading to unintended responses or server misconfiguration. This can result in unauthorized access, data leakage, or other serious security consequences. To mitigate this risk, it is recommended to upgrade to the latest version of OpenResty's lua-nginx-module as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.