CVE-2020-7670

CVE-2020-7670 describes a request smuggling vulnerability in ohler agoo prior to version 2.14.0, stemming from improper parsing of Content-Length and Transfer-Encoding headers. This flaw allows for HTTP request smuggling attacks when agoo acts as a backend server in a proxy chain. With a CVSS score of 7.5 (HIGH), exploitation is network-based and requires low complexity, potentially leading to high integrity impact, though confidentiality and availability are not directly affected. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.