Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rc2m-q589-vpqx

Опубликовано: 06 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

EPSS

Процентиль: 87%
0.03548
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-444

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

CVSS3: 6.5
redhat
больше 2 лет назад

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

CVSS3: 6.5
nvd
больше 2 лет назад

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

CVSS3: 6.5
msrc
больше 2 лет назад

Описание отсутствует

CVSS3: 6.5
debian
больше 2 лет назад

The llhttp parser in the http module in Node v18.7.0 does not correctl ...

EPSS

Процентиль: 87%
0.03548
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-444