request-smuggling

HTTP Request Smuggling: CL.TE and TE.CL Attack Techniques

Analysis of HTTP Request Smuggling (HTTP DeSync Attack): how CL.TE and TE.CL deserialization vulnerabilities bypass frontend security controls and poison the backend request queue