Lucene search

CVE-2020-8201

🗓️ 18 Sep 2020 21:12:15Reported by hackeroneType

cve🔗 web.nvd.nist.gov👁 209 Views🌐 3 Media mentions

Node.js < 12.18.4 and < 14.11 HTTP desync vulnerabilit

Reporter	Title	Published	Views	Family All 79
OSV	CVE-2020-8201	18 Sep 202021:15	–	osv
OSV	BIT-node-2020-8201	6 Mar 202411:08	–	osv
OSV	BIT-node-min-2020-8201	16 Dec 202414:07	–	osv
OSV	Red Hat Security Advisory: rh-nodejs12-nodejs security update	13 Sep 202422:43	–	osv
OSV	Moderate: nodejs:12 security and bug fix update	19 Oct 202007:13	–	osv
OSV	Red Hat Security Advisory: nodejs:12 security and bug fix update	13 Sep 202422:43	–	osv
OSV	Red Hat Security Advisory: nodejs:12 security and bug fix update	13 Sep 202422:43	–	osv
OSV	Moderate: nodejs:12 security and bug fix update	19 Oct 202007:13	–	osv
OSV	nodejs14-14.17.5-1.2 on GA media	15 Jun 202400:00	–	osv
UbuntuCve	CVE-2020-8201	18 Sep 202000:00	–	ubuntucve

Nvd

Vulners

Node

nodejs node.jsRange12.0.0–12.18.4lts

nodejs node.jsRange14.0.0–14.11.0

Node

opensuse leapMatch15.2

Node

fedoraproject fedoraMatch33

[
  {
    "product": "https://github.com/nodejs/node",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in 12.18.4 and 14.11"
      }
    ]
  }
]

Source	Link
hackerone	www.hackerone.com/reports/922597
security	www.security.gentoo.org/glsa/202101-07
nodejs	www.nodejs.org/en/blog/vulnerability/september-2020-security-releases/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/
security	www.security.netapp.com/advisory/ntap-20201009-0004/
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00011.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Sep 2020 21:15Current

7.1High risk

Vulners AI Score7.1

CVSS25.8

CVSS37.4

EPSS0.004

CWE-444