CVE-2023-27522 is a high-severity vulnerability affecting Apache HTTP Server versions 2.4.30 through 2.4.55. This HTTP Response Smuggling vulnerability occurs in the mod_proxy_uwsgi module, where special characters in the origin response header can truncate or split the response forwarded to the client. Systems running the affected Apache HTTP Server versions, as well as certain configurations of Debian Linux and Unbit Uwsgi, are at risk.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, check if you're using Apache HTTP Server versions 2.4.30 through 2.4.55. Additionally, certain configurations of Debian Linux 10.0 and Unbit Uwsgi versions up to (excluding) 2.0.22 are also at risk. If your system falls within these categories, it's crucial to stay informed and take necessary precautions to protect your data and network.

What should I do if I'm affected?

If you're affected by the vulnerability, it's essential to take action. First, upgrade to the latest version of Apache HTTP Server that includes fixes for the vulnerability. Next, follow the recommendations for configuring the server securely provided by the Apache HTTP Server project. Finally, monitor their announcements for future security updates or patches.

Is CVE-2023-27522 in CISA’s Known Exploited Vulnerabilities Catalog?

As of now, CVE-2023-27522 is not listed in CISA's Known Exploited Vulnerabilities Catalog. This vulnerability, known as HTTP Response Smuggling in Apache HTTP Server via mod_proxy_uwsgi, was published on March 7, 2023. There is no specified due date or required action mentioned. To address this issue, it's recommended to upgrade to the latest version of Apache HTTP Server and follow the provided security guidelines.

Weakness enumeration

The Weakness Enumeration for CVE-2023-27522 is identified as CWE-444, which refers to inconsistent interpretation of HTTP requests, also known as HTTP Request/Response Smuggling. This vulnerability can lead to bypassing security controls and denial of service.

For more details

CVE-2023-27522 is a significant vulnerability that requires immediate attention and remediation. For a comprehensive understanding of its description, severity, technical details, and affected software configurations, refer to the NVD page or the resources listed below.

• Apache HTTP Server 2.4 vulnerabilities

• Debian LTS Announce - Apache2 security update

• Gentoo Security - Apache HTTPD: Multiple Vulnerabilities