H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

{"p":["An adversary abuses the flexibility and discrepancies in the parsing and interpretation of HTTP Request messages by different intermediary HTTP agents (e.g., load balancer, reverse proxy, web caching proxies, application firewalls, etc.) to split a single HTTP request into multiple unauthorized and malicious HTTP requests to a back-end HTTP agent (e.g., web server).","See CanPrecede relationships for possible consequences."]}

Labels

attack-patterncapec
22 recorded

Relationships

related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
related-toVulnerability
1 external

References

capec
CAPEC-105
open