CVE-2024-32638

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Apache APISIX when using `forward-auth` plugin.This issue affects Apache APISIX: from 3.8.0, 3.9.0. Users are recommended to upgrade to version 3.8.1, 3.9.1 or higher, which fixes the issue.

• CWE-444
• CWE-444

• http://www.openwall.com/lists/oss-security/2024/05/02/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/ngvgxllw4zn4hgngkqw2o225kf9wotovMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2024/05/02/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/ngvgxllw4zn4hgngkqw2o225kf9wotovMailing List, Vendor Advisory

Published

May 2, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32632A value in ATCMD will be misinterpreted by printf, causing i…6.6
• CVE-2024-32633An unsigned value can never be negative, so eMMC full disk t…4
• CVE-2024-32634In huge memory get unmapped area check, code can never be re…6.1
• CVE-2024-32635A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-32636A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-32637A vulnerability has been identified in JT2Go (All versions <…5.5
• CVE-2024-32639A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2024-3264Use of a Broken or Risky Cryptographic Algorithm vulnerabili…5.3
• CVE-2024-32640MASA CMS is an Enterprise Content Management platform based …9.8
• CVE-2024-32641Masa CMS is an open source Enterprise Content Management pla…9.8
• CVE-2024-32642Masa CMS is an open source Enterprise Content Management pla…8.8
• CVE-2024-32643Masa CMS is an open source Enterprise Content Management pla…7.5