Lucene search

K
redosRedosROS-20240923-04
HistorySep 23, 2024 - 12:00 a.m.

ROS-20240923-04

2024-09-2300:00:00
redos.red-soft.ru
1
node.js
vulnerability
http request smuggling

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

7

Confidence

Low

A vulnerability in the Node.js software platform is related to flaws in HTTP request processing. Exploitation
vulnerability could allow an attacker acting remotely to send a covert HTTP request (HTTP Request Smuggling attack).
HTTP Request Smuggling)

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64nodejs<ย 18.20.1-1UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

7

Confidence

Low