Lucene search
HistorySep 08, 2024 - 12:15 p.m.
CVE-2024-42342
cve-2024-42342 loway http request/response smuggling cwe-444 inconsistent interpretation
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
17.7%
Loway - CWE-444: Inconsistent Interpretation of HTTP Requests (‘HTTP Request/Response Smuggling’)
Affected configurations
Node
lowayqueuemetricsRange22.11.6–24.05.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| loway | queuemetrics | * | cpe:2.3:a:loway:queuemetrics:*:*:*:*:*:*:*:* |
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-42342