onyx --cves cve-2022-36760

CVE-2022-36760

score: <0.1
cvss: 9.0
epss: 1.9%
published: 2023-01-17
kev added: —
first seen: 2026-10-21

Apache HTTP Server 2.4.54 and prior versions contain an HTTP request smuggling caused by inconsistent interpretation of HTTP requests in mod_proxy_ajp, letting attackers smuggle malicious requests to the AJP server, exploit requires sending crafted HTTP requests.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2023-01-17 Published
2026-10-21 Tracked by Onyx

Weaknesses

CWE-444

References 2

https://security.gentoo.org/glsa/202309-01
https://httpd.apache.org/security/vulnerabilities_24.html