EXPLOITING REFLECTED INPUT VIA THE RANGE HEADER

Summary from the TLDR InfoSec newsletter

Reflected input in web attacks can sometimes be made exploitable by using the Range header to extract specific sections from a server response. By combining this technique with desync or header injection, attackers can turn previously unexploitable vectors into fully exploitable ones. The ability to manipulate the Range header can lead to successful attacks by extracting targeted content from server responses.