CVE-2025-54142: Medium severity Akamai Ghost vulnerability
Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54142?
The severity of CVE-2025-54142 is considered high due to the potential for HTTP Request Smuggling attacks.
How do I fix CVE-2025-54142?
To fix CVE-2025-54142, upgrade your Akamai Ghost version to the latest available release after July 21, 2025.
What are the risks associated with CVE-2025-54142?
The risks associated with CVE-2025-54142 include potential exploitation of HTTP Request Smuggling, leading to unauthorized actions on behalf of users.
Which versions of Akamai Ghost are affected by CVE-2025-54142?
Akamai Ghost versions before 2025-07-21 are affected by CVE-2025-54142.
What type of attack does CVE-2025-54142 facilitate?
CVE-2025-54142 facilitates HTTP Request Smuggling attacks through the use of an OPTIONS request with an entity body.