Basecamp disclosed on HackerOne: HTTP Request Smuggling via HTTP/2
HTTP Request Smuggling via HTTP/2