{"id":"CVE-2019-20372","published":"2020-01-09T20:05:38Z","modified":"2024-08-05T02:39:09Z","title":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.","provenance":"source","from":"CVE.org"},"summary":{"text":"NGINX versions before 1.17.7 contain a flaw in how the server handles certain error_page configurations, enabling HTTP request smuggling. An attacker can exploit it to read unauthorized web pages where NGINX sits behind a load balancer, and this requires only that the server is configured with the affected error_page settings.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:16:33Z"},"cvss":null,"epss":{"score":0.14961,"percentile":0.96711,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[],"references":[{"url":"https://bertjwregeer.keybase.pub/2019-12-10%20-%20error_page%20request%20smuggling.pdf","tags":["x_refsource_MISC"]},{"url":"http://nginx.org/en/CHANGES","tags":["x_refsource_MISC"]},{"url":"https://duo.com/docs/dng-notes#version-1.5.4-january-2020","tags":["x_refsource_MISC"]},{"url":"https://github.com/kubernetes/ingress-nginx/pull/4859","tags":["x_refsource_MISC"]},{"url":"https://github.com/nginx/nginx/commit/c1be55f97211d38b69ac0c2027e6812ab8b1b94e","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/4235-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/4235-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://security.netapp.com/advisory/ntap-20200127-0003/","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://support.apple.com/kb/HT212818","tags":["x_refsource_CONFIRM"]},{"url":"http://seclists.org/fulldisclosure/2021/Sep/36","tags":["mailing-list","x_refsource_FULLDISC"]}],"techniques":[],"reports":[{"id":"SRC-b804e28bf5894dd4955f","title":"Whitepaper Name Goes","publisher":"trustwave.com","url":"https://www.trustwave.com/hubfs/Web/Library/Documents_pdf/Trustwave_SpiderLabs_2023_Hospitality_Sector_Threat_Landscape.pdf","date":null,"mentions":[{"quote":"▪ SQLite DoS vulnerability (CVE-2019-20372)","start":45693,"end":45736}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2019-10924","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10924","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":1,"earliest":"2023-09-16","earliestUrl":"https://github.com/0xleft/CVE-2019-20372","repos":[{"name":"0xleft/CVE-2019-20372","url":"https://github.com/0xleft/CVE-2019-20372","stars":6,"created":"2023-09-16"},{"name":"moften/CVE-2019-20372","url":"https://github.com/moften/CVE-2019-20372","stars":1,"created":"2025-02-07"}]},"first":{"date":"2023-09-16","source":"PoC-in-GitHub","url":"https://github.com/0xleft/CVE-2019-20372"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2020-01-09","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2019-20372","provenance":"source"},{"date":"2023-09-16","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/0xleft/CVE-2019-20372","provenance":"source"}],"speed":{"daysToPublicExploit":1346,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":28.2,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.34,"detail":"percentile 0.9671"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}