writeups.xyz / “ParseThru” – Exploiting HTTP Parameter Smuggling in Golang

Submitter : c2a

Date: 28 July 2022

Bounty : undisclosed

Vulnerabilities :

• HTTP Parameter Smuggling

Programs :

• Harbor
• Traefik
• Skipper

Authors :

• Daniel Abeles (@Daniel_Abeles)
• Gal Goldsthein (@G4lGo89)

Link :
https://www.oxeye.io/blog/golang-parameter-smuggling-attack