Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
•added 2023/07/31 9:36 a.m.•20 views

nodejs: HTTP Request Smuggling via Empty headers separated by CR

A vulnerability has been identified in the Node.js, where llhttp parser in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

7.5CVSS7.1AI score0.03906EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2023/02/15 3:25 a.m.•9 views

SUSE CVE-2022-32214

The llhttp parser v14.20.1, v16.17.1 and v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling HRS...

6.8CVSS6.8AI score0.81832EPSS
SaveExploits1References16
Rows per page
Query Builder