Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/06/19 8:43 a.m.246 views

Node.js: HTTP Request Smuggling due to ignoring chunk extensions

Summary: The llhttp parser in the http module in Node 16.3.0 ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling HRS when a Node server is put behind an Apache Traffic Server ATS 9.0.0 proxy. Description: In the chunked transfer encoding format...

5.8CVSS7.6AI score0.02299EPSS
SaveExploits1
Rows per page
Query Builder