Collected research

QUICforge: Client-side Request Forgery in QUIC

Yuri Gbur and Florian Tschorsch · NDSS Symposium

QUIC's design lets a client with a spoofed source address make a server send attacker-shaped UDP datagrams to a third host, through server initial packets, version negotiation or connection migration.

Record

Researcher

Yuri Gbur and Florian Tschorsch

Published by

NDSS Symposium

Topic

HTTP

In the archive

• Collected in the 2023 research round

Related sources

• NDSS 2023 - QUICforge: Client-side Request Forgery in QUIC

Tags

• ssrf
• dos
• http3
• dns
• tls
• measurement-study
• mitigation
• owasp-a02-2021
• owasp-a10-2021

This page is the archive's own catalogue record. The research is the work of Yuri Gbur and Florian Tschorsch, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 14 August 2026.