HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Apache HTTP Server can fail to properly close a connection when it encounters errors while processing a request, allowing attackers to send hidden HTTP requests that the server processes unexpectedly. This can lead to unauthorized actions or access to sensitive data.

HTTP request smuggling vulnerability where Apache HTTP Server 2.4.52 and earlier fails to close inbound connections upon encountering errors during request body discarding. An attacker can exploit improper connection handling to inject malicious requests that bypass security controls, affecting request interpretation between intermediaries and the origin server.