Last Modified: Nov 02, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 17.0.0, 17.0.0.1, 17.0.0.2, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1
Opened: Jun 22, 2022 Severity: 4-Minor
Request parser for inner request is intolerant for a linefeed that results in a HTTP Protocol Compliance violation with the following details. HTTP Validation Bad multipart parameters parsing Details Illegal internal request in multipart batch request
Request gets blocked
- multipart/batch(ing) request - inner requests use LF for end-of-line marker, instead of canonical marker CRLF
None
None