Описание
Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 8.10.0~dfsg-2 |
| cosmic | not-affected | 8.11.2~dfsg-1 |
| devel | not-affected | 8.11.2~dfsg-1 |
| disco | not-affected | 8.11.2~dfsg-1 |
| eoan | not-affected | 8.11.2~dfsg-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | not-affected | 8.10.0~dfsg-2 |
| esm-apps/focal | not-affected | 8.11.2~dfsg-1 |
| esm-apps/jammy | not-affected | 8.11.2~dfsg-1 |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0 ...
Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
EPSS
5 Medium
CVSS2
7.5 High
CVSS3