CVE ID:	CVE-2024-1135
Description:	Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer- Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks including cache poisoning, session manipulation, and data exposure.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2024.1440.1   1.3.6.1.4.1.25623.1.1.10.2024.0236   1.3.6.1.4.1.25623.1.0.856107   1.3.6.1.4.1.25623.1.0.127727   1.3.6.1.4.1.25623.1.1.1.2.2024.3996   1.3.6.1.4.1.25623.1.1.18.2.2024.2881.1   1.3.6.1.4.1.25623.1.1.1.2.2024.3851
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-1135 https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1 https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1