CVE-2024-38809
- Source
- https://cve.org/CVERecord?id=CVE-2024-38809
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38809.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-38809
- Aliases
- Downstream
- Related
- Published
- 2024-09-27T17:15:12Z
- Modified
- 2026-02-04T02:29:30.384507Z
- Summary
- [none]
- Details
-
Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.
Users of affected versions should upgrade to the corresponding fixed version.
Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.
- References