Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2023/07/31 9:36 a.m.6 views

nodejs: HTTP Request Smuggling via Empty headers separated by CR

A vulnerability has been identified in the Node.js, where llhttp parser in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

7.5CVSS7.1AI score0.03906EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:25 a.m.4 views

SUSE CVE-2022-32214

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

6.8CVSS6.8AI score0.81464EPSS
SaveExploits1References16
Rows per page
Query Builder