CVE-2015-7265
HighSummary
Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, allowing remote attackers to conduct hijacking attacks and bypass ACL checks.
Risk Assessment
Attackers may take control of user sessions or gain access to resources they should not have access to, potentially leading to serious security breaches.
Recommendation
It is recommended to update Facebook Proxygen to a version after 2015-11-09 to mitigate this vulnerability.
Other vulnerabilities in Facebook Proxygen
See all- CVE-2015-7263High
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.
- CVE-2015-7264Critical
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
Original NVD description (English source)
Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijacking attacks and bypass ACL checks.