Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
TornadoWebServer Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) V - CVE-2023-54397 - Vulnerability Database
Tornado

TornadoWebServer Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) V - CVE-2023-54397

Low
Reference: CVE-2023-54397
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-54397
Title: TornadoWebServer Inconsistent Interpretation of HTTP Requests (HTTP Request/Response Smuggling) V
Overview:

Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain proxies.