How severe is CVE-2019-19326?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.9 out of 10.

What type of vulnerability is CVE-2019-19326?

This is classified as CWE-444, which is a common weakness in software security.

CVE-2019-19326 - MEDIUM Severity | CVSS 5.9

Vulnerability Description

Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return unexpected responses to other consumers of this cached response. Most other headers associated with web cache poisoning are already disabled through request hostname forgery whitelists.

Related Vulnerabilities

CVE-2021-21295

MEDIUM

CVSS:5.9(Medium)

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2...

CWE-4442021

CVE-2021-21409

MEDIUM

CVSS:5.9(Medium)

CWE-4442021

CVE-2021-23336

MEDIUM

CVSS:5.9(Medium)

The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse...

CWE-4442021

CVE-2022-0552

MEDIUM

CVSS:5.9(Medium)

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-ht...

CWE-4442022

CVE-2024-34535

MEDIUM

CVSS:5.9(Medium)

In Mastodon 4.1.6, API endpoint rate limiting can be bypassed by setting a crafted HTTP request header.

CWE-4442024

CVE-2017-7559

MEDIUM

CVSS:6.1(Medium)

In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the fix for CVE-2017-2666 was incomplete and invalid characters are still allowed in th...

CWE-4442017