High severity7.5NVD Advisory· Published Sep 15, 2026· Updated Sep 17, 2026
CVE-2023-54397
CVE-2023-54397
Description
Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain proxies.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <6.3.3
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.