CVE-2025-30346 in Cache

Resumen (Inglés)

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsable

MITRE

Reservar

2025-03-21

Divulgación

2025-03-21

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
300573	Varnish Cache HTTP1 escalada de privilegios	444	No está definido	Arreglo oficial	CVE-2025-30346

Fuentes

• MITRE
• NVD
• CVE Details