Rating: 5.0
A HTTP desync between HAProxy and Gunicorn with malform `Transfer-Encoding:\vchunked` header leads to stealing flag from Flag BOTS HTTP request.
Good write-up!
I don't remember
