{"id":163792,"date":"2026-03-10T23:11:57","date_gmt":"2026-03-10T21:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-proekte-pingora-pozvolyayushhie-vklinitsya-v-storonnie-zaprosy"},"modified":"2026-03-10T23:11:57","modified_gmt":"2026-03-10T21:11:59","slug":"uyazvimosti-v-proekte-pingora-pozvolyayushhie-vklinitsya-v-storonnie-zaprosy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-proekte-pingora-pozvolyayushhie-vklinitsya-v-storonnie-zaprosy","title":{"rendered":"Sebezhet\u0151s\u00e9gek a Pingora projektben, amelyek lehet\u0151v\u00e9 teszik harmadik f\u00e9l k\u00e9r\u00e9sekbe val\u00f3 beavatkoz\u00e1st.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Cloudflare bejelentette a Pingora keretrendszer\u00e9ben h\u00e1rom sebezhet\u0151s\u00e9g megsz\u00fcntet\u00e9s\u00e9t, amelyek k\u00f6z\u00fcl kett\u0151 kritikus szint\u0171 vesz\u00e9lyess\u00e9ggel b\u00edr (9.3 a 10-b\u0151l). A Pingora keretrendszer Rust nyelven \u00edr\u00f3dott, \u00e9s biztons\u00e1gos, nagy teljes\u00edtm\u00e9ny\u0171 h\u00e1l\u00f3zati szolg\u00e1ltat\u00e1sok fejleszt\u00e9s\u00e9re szolg\u00e1l. A Pingora seg\u00edts\u00e9g\u00e9vel \u00e9p\u00edtett proxy a Cloudflare tartalomszolg\u00e1ltat\u00f3 h\u00e1l\u00f3zat\u00e1ban tal\u00e1lhat\u00f3, \u00e9s t\u00f6bb mint 40 milli\u00f3 k\u00e9r\u00e9st kezel m\u00e1sodpercenk\u00e9nt. A sebezhet\u0151s\u00e9geket a Pingora 0.8.0 verzi\u00f3j\u00e1ban orvosolt\u00e1k. <\/p>\n

K\u00e9t legvesz\u00e9lyesebb s\u00e9r\u00fcl\u00e9kenys\u00e9g lehet\u0151v\u00e9 teszi a \u201eHTTP Request Smuggling\u201d t\u00e1mad\u00e1sok v\u00e9grehajt\u00e1s\u00e1t, amelyek seg\u00edts\u00e9g\u00e9vel megker\u00fclhet\u0151k a hozz\u00e1f\u00e9r\u00e9si korl\u00e1toz\u00e1sok \u00e9s be lehet f\u00e9rk\u0151zni m\u00e1s felhaszn\u00e1l\u00f3k \u00e1ltal feldolgozott k\u00e9r\u00e9sek tartalm\u00e1ba, amelyek ugyanabban az \u00e1raml\u00e1sban zajlanak a frontend \u00e9s a backend k\u00f6z\u00f6tt (p\u00e9ld\u00e1ul rosszindulat\u00fa JavaScript-k\u00f3d beilleszt\u00e9se egy m\u00e1sik felhaszn\u00e1l\u00f3 \u00fcl\u00e9seibe a webhellyel). A probl\u00e9m\u00e1kat a Bug Bounty program r\u00e9sztvev\u0151je azonos\u00edtotta, amely jutalmat k\u00edn\u00e1l a s\u00e9r\u00fcl\u00e9kenys\u00e9gek felfedez\u00e9s\u00e9\u00e9rt. <\/p>\n

A visszafel\u00e9 proxy-n kereszt\u00fcl t\u00f6rt\u00e9n\u0151 backend-h\u00edv\u00e1sokkal foglalkoz\u00f3 s\u00e9m\u00e1ban a kliensek k\u00e9r\u00e9seket egy tov\u00e1bbi csom\u00f3pont fogadja, amely tart\u00f3s TCP-kapcsolatot l\u00e9tes\u00edt a backenddel, amely a k\u00e9r\u00e9sek k\u00f6zvetlen feldolgoz\u00e1s\u00e1t v\u00e9gzi. Ezen k\u00f6z\u00f6s kapcsolaton kereszt\u00fcl \u00e1ltal\u00e1ban k\u00fcl\u00f6nb\u00f6z\u0151 felhaszn\u00e1l\u00f3k k\u00e9r\u00e9sei jutnak el, amelyek egyt\u0151l-egyig a HTTP protokoll eszk\u00f6zeivel elv\u00e1lasztva k\u00f6vetkeznek egym\u00e1s ut\u00e1n. A HTTP Request Smuggling t\u00e1mad\u00e1sok a HTTP-fejl\u00e9cek \u00e9s a HTTP-protokoll specifik\u00e1ci\u00f3k elt\u00e9r\u0151 \u00e9rtelmez\u00e9s\u00e9b\u0151l ad\u00f3dnak a frontendek \u00e9s backendek k\u00f6z\u00f6tt, p\u00e9ld\u00e1ul amikor a frontend a k\u00e9r\u00e9s m\u00e9ret\u00e9nek meghat\u00e1roz\u00e1s\u00e1hoz a \u201eContent-Length\u201d HTTP-fejl\u00e9ket, m\u00edg a backend a \u201eTransfer-Encoding: chunked\u201d fejet haszn\u00e1lja. <\/p>\n

Az els\u0151 s\u00e9r\u00fcl\u00e9kenys\u00e9g, a CVE-2026-2835, a HTTP\/1.0 k\u00e9r\u00e9sek elemz\u0151 k\u00f3dj\u00e1ban tal\u00e1lhat\u00f3, \u00e9s a \u201eTransfer-Encoding\u201d fejl\u00e9c t\u00f6bb \u00e9rt\u00e9k\u00e9nek helytelen feldolgoz\u00e1s\u00e1b\u00f3l, valamint a kapcsolatz\u00e1r\u00e1s testv\u00e9g jelz\u00e9s\u00e9nek haszn\u00e1lat\u00e1b\u00f3l (close-delimited) ered. A Pingora csak a \u201eTransfer-Encoding: chunked\u201d v\u00e1ltozatot ellen\u0151rizte, \u00e9s figyelmen k\u00edv\u00fcl hagyta ezt a fejet, ha az t\u00f6bb \u00e9rt\u00e9ket tartalmazott. Ebben az esetben a Pingora nem vette figyelembe a \u201eContent-Length\u201d fejl\u00e9cben megadott m\u00e9retet, \u00e9s a k\u00e9r\u00e9s test\u00e9nek tekintette az \u00f6sszes olyan adatot, amelyet a kapcsolatz\u00e1r\u00e1sig kapott. <\/p>\n

T\u00f6bb \u00e9rt\u00e9k megad\u00e1s\u00e1val a \u201eTransfer-Encoding\u201d fejl\u00e9cben a t\u00e1mad\u00f3 olyan k\u00f6r\u00fclm\u00e9nyeket teremthetett, amelyek r\u00e9v\u00e9n a backendhez egy k\u00e9r\u00e9s ir\u00e1nyult, amelynek t\u00e9nyleges m\u00e9rete nem felelt meg a chunked l\u00e1nc m\u00e9ret\u00e9nek, amelyet a \u201eTransfer-Encoding\u201d fejl\u00e9c alapj\u00e1n sz\u00e1moltak ki. A Pingora az \u00f6sszes kapott adatot egyetlen k\u00e9r\u00e9ss\u00e9 ir\u00e1ny\u00edtotta, m\u00edg a backend, p\u00e9ld\u00e1ul a Node.js, a \u201eTransfer-Encoding: chunked\u201d alapj\u00e1n sz\u00e1m\u00edtotta ki a k\u00e9r\u00e9st, \u00e9s a fennmarad\u00f3 r\u00e9szt egy m\u00e1sik k\u00e9r\u00e9s elemek\u00e9nt dolgozta fel. GET \/ HTTP\/1.0 Host: example.com Connection: keep-alive Transfer-Encoding: identity, chunked Content-Length: 29 0 GET \/admin HTTP\/1.1 X:

\"Sebezhet\u0151s\u00e9gek<\/center> <\/p>\n

A m\u00e1sodik CVE-2026-2833 s\u00e9r\u00fcl\u00e9kenys\u00e9g a HTTP\/1.1 k\u00e9r\u00e9s \"Upgrade\" fejl\u00e9c\u00e9nek helytelen kezel\u00e9s\u00e9b\u0151l ad\u00f3dik. Amennyiben a k\u00e9r\u00e9sben tal\u00e1lhat\u00f3 az \"Upgrade\" fejl\u00e9c, a proxy azonnal \u00e1tir\u00e1ny\u00edtotta a backendhez \u00e9s a k\u00e9r\u00e9sben az \"Upgrade\" fejl\u00e9ct\u0151l k\u00f6vetkez\u0151 tov\u00e1bbi adatokat, nem v\u00e1rva meg a backend 101-es (Switching Protocols) k\u00f3d\u00fa v\u00e1lasz\u00e1t. Emiatt megszakadt a folyamat szinkroniz\u00e1ci\u00f3ja a proxy \u00e9s a backend k\u00f6z\u00f6tt, a backend az \"Upgrade\" fejl\u00e9c ut\u00e1n elk\u00fcld\u00f6tt adatokat k\u00fcl\u00f6n k\u00e9r\u00e9sk\u00e9nt kezelte, \u00e9s a m\u00e1s felhaszn\u00e1l\u00f3 \u00e1ltal k\u00f6vetkez\u0151 k\u00e9r\u00e9s eredm\u00e9ny\u00e9t k\u00fcldte vissza v\u00e1laszk\u00e9nt. GET \/ HTTP\/1.1 Host: example.com Upgrade: foo GET \/admin HTTP\/1.1 Host: example.com

\"Sebezhet\u0151s\u00e9gek<\/center>
\"Sebezhet\u0151s\u00e9gek<\/center> <\/p>\n

A probl\u00e9m\u00e1k a Pingora haszn\u00e1latakor jelentkeznek visszafel\u00e9 proxy (ingress proxy) form\u00e1j\u00e1ban, amikor a felhaszn\u00e1l\u00f3i k\u00e9r\u00e9seket a backendekhez tov\u00e1bb\u00edtja HTTP\/1.0 vagy HTTP\/1.1 protokollokkal. A Cloudflare tartalomk\u00e9zbes\u00edt\u0151 h\u00e1l\u00f3zat\u00e1ban alkalmazott Pingora konfigur\u00e1ci\u00f3ja megakad\u00e1lyozta a s\u00e9r\u00fcl\u00e9kenys\u00e9gek kihaszn\u00e1l\u00e1s\u00e1t, mivel a Pingora a CDN-ben nem ingress proxyk\u00e9nt m\u0171k\u00f6dik, a k\u00e9r\u00e9seket kiz\u00e1r\u00f3lag HTTP\/1.1 protokoll haszn\u00e1lat\u00e1val ir\u00e1ny\u00edtja \u00e1t, blokkolja az \u00e9rv\u00e9nytelen Content-Length \u00e9rt\u00e9k\u0171 k\u00e9r\u00e9seket, csak egy \"Transfer-Encoding: chunked\" fejl\u00e9c \u00e9rt\u00e9ket ir\u00e1ny\u00edt \u00e1t, \u00e9s a \"Upgrade:\" fejl\u00e9c\u0171 k\u00e9r\u00e9sekhez egy \"Connection: close\" fejl\u00e9cet ad hozz\u00e1, amely megakad\u00e1lyozza tov\u00e1bbi k\u00e9r\u00e9sek \u00e1tvitel\u00e9t ugyanazon a kapcsolaton. <\/p>\n

A harmadik CVE-2026-2836 s\u00e9r\u00fcl\u00e9kenys\u00e9g (vesz\u00e9lyess\u00e9gi fokozat 8.4 a 10-b\u0151l) cache poisoninghoz vezet az\u00e1ltal, hogy a cache-el\u00e9si kulcs (CacheKey) gener\u00e1l\u00e1sa kiz\u00e1r\u00f3lag az URI \u00fatvonal\u00e1n alapul, figyelmen k\u00edv\u00fcl hagyva a \"Host\" fejl\u00e9c tartalm\u00e1t. Ez a hi\u00e1nyoss\u00e1g azonos cache kulcsokat eredm\u00e9nyez a k\u00fcl\u00f6nb\u00f6z\u0151 hosztokhoz tartoz\u00f3, azonos HTTP-\u00fatvonalak\u00e9rt. A s\u00e9r\u00fcl\u00e9kenys\u00e9g lehet\u0151s\u00e9get adhat a cache tartalm\u00e1nak bef\u00e9rk\u0151z\u00e9s\u00e9re, ha t\u00f6bb hoszt eset\u00e9n cache-el\u00e9si m\u00f3dot alkalmaznak. A Pingor\u00e1ban a cache-el\u00e9s k\u00eds\u00e9rleti funkci\u00f3, amely nem aj\u00e1nlott \u00e9les bevezet\u00e9sre.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Pingora, \u0434\u0432\u0443\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.3 \u0438\u0437 10). \u0424\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a Pingora \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \u041f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 Pingora \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 Cloudflare \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 40 \u043c\u043b\u043d \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u0441\u0435\u043a\u0443\u043d\u0434\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":163793,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-163792","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sebezhet\u0151s\u00e9gek a Pingora projektben, amelyek lehet\u0151v\u00e9 teszik harmadik felek k\u00e9rd\u00e9seibe val\u00f3 beavatkoz\u00e1st | ProHoster","description":"A Cloudflare bejelentette h\u00e1rom sebezhet\u0151s\u00e9g megsz\u00fcntet\u00e9s\u00e9t a Pingora keretrendszerben, amelyek k\u00f6z\u00fcl kett\u0151 kritikus vesz\u00e9lyess\u00e9gi szintet kapott (9,3 a 10-b\u0151l).","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-proekte-pingora-pozvolyayushhie-vklinitsya-v-storonnie-zaprosy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 Pingora, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u043a\u043b\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Pingora, \u0434\u0432\u0443\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.3 \u0438\u0437 10).","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-proekte-pingora-pozvolyayushhie-vklinitsya-v-storonnie-zaprosy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-03-10T21:11:59+00:00","article:modified_time":"2026-03-10T21:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/163792","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=163792"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/163792\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/163793"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=163792"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=163792"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=163792"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}