CVE-2015-7263
HighSummary
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.
Risk Assessment
Attackers may take control of user sessions or gain access to resources they should not have access to, potentially leading to serious security breaches.
Recommendation
It is recommended to update Facebook Proxygen to a version after 2015-11-09 to mitigate this vulnerability.
Other vulnerabilities in Facebook Proxygen
See all- CVE-2015-7265High
Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, allowing remote attackers to conduct hijacking attacks and bypass ACL checks.
- CVE-2015-7264Critical
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
Original NVD description (English source)
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.