HTTP Request Smuggling

🗓️ 27 Sep 2022 22:47:16Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 36 Views

HTTP Request Smuggling vulnerability in nodejs-curren

Reporter	Title	Published	Views	Family All 255
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to Node.js (CVE-2022-43548 & CVE-2022-35256)	6 Jan 202314:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Event Streams (CVE-2022-35255 and CVE-2022-35256)	28 Oct 202215:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to HTTP request smuggling (CVE-2022-35256)	16 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability is addressed with IBM Cloud Pak for Business Automation iFixes for November 2022	26 Mar 202502:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in node.js	27 Oct 202210:20	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.8 and earlier	27 Oct 202215:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in node.js	21 Oct 202220:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	5 May 202316:01	–	ibm

Vulners

Node

nodejs-current nodejs-currentMatch18.1.0-r0os

AND

nodejs-current nodejs-currentMatch18.6.0-r0os

AND

nodejs-current nodejs-currentMatch18.0.0-r1os

AND

nodejs-current nodejs-currentMatch18.2.0-r0os

AND

alpinelinux alpine_linuxMatch3.16

nodejs-current nodejs-currentMatch16.2.0-r0os

AND

nodejs-current nodejs-currentMatch18.1.0-r0os

AND

nodejs-current nodejs-currentMatch13.1.0-r0os

AND

nodejs-current nodejs-currentMatch17.3.0-r0os

AND

nodejs-current nodejs-currentMatch15.12.0-r0os

AND

nodejs-current nodejs-currentMatch18.2.0-r0os

AND

nodejs-current nodejs-currentMatch13.12.0-r0os

AND

nodejs-current nodejs-currentMatch16.8.0-r0os

AND

nodejs-current nodejs-currentMatch18.7.0-r0os

AND

nodejs-current nodejs-currentMatch13.13.0-r0os

AND

nodejs-current nodejs-currentMatch15.14.0-r0os

AND

nodejs-current nodejs-currentMatch18.3.0-r1os

AND

nodejs-current nodejs-currentMatch18.4.0-r0os

AND

nodejs-current nodejs-currentMatch14.0.0-r0os

AND

nodejs-current nodejs-currentMatch13.11.0-r0os

AND

nodejs-current nodejs-currentMatch16.6.2-r0os

AND

nodejs-current nodejs-currentMatch14.2.0-r0os

AND

nodejs-current nodejs-currentMatch18.9.0-r0os

AND

nodejs-current nodejs-currentMatch16.4.2-r0os

AND

nodejs-current nodejs-currentMatch16.1.0-r0os

AND

nodejs-current nodejs-currentMatch16.9.1-r0os

AND

nodejs-current nodejs-currentMatch15.13.0-r0os

AND

nodejs-current nodejs-currentMatch16.6.1-r0os

AND

nodejs-current nodejs-currentMatch17.7.1-r0os

AND

nodejs-current nodejs-currentMatch18.5.0-r0os

AND

nodejs-current nodejs-currentMatch14.1.0-r0os

AND

nodejs-current nodejs-currentMatch17.0.1-r0os

AND

nodejs-current nodejs-currentMatch16.5.0-r0os

AND

nodejs-current nodejs-currentMatch17.8.0-r0os

AND

nodejs-current nodejs-currentMatch16.3.0-r0os

AND

nodejs-current nodejs-currentMatch16.10.0-r0os

AND

nodejs-current nodejs-currentMatch18.7.0-r2os

AND

nodejs-current nodejs-currentMatch14.3.0-r0os

AND

nodejs-current nodejs-currentMatch18.8.0-r0os

AND

nodejs-current nodejs-currentMatch16.4.0-r0os

AND

nodejs-current nodejs-currentMatch16.0.0-r0os

AND

nodejs-current nodejs-currentMatch16.7.0-r0os

AND

nodejs-current nodejs-currentMatch15.11.0-r0os

AND

nodejs-current nodejs-currentMatch17.6.0-r0os

AND

nodejs-current nodejs-currentMatch16.11.1-r1os

AND

nodejs-current nodejs-currentMatch18.6.0-r0os

AND

nodejs-current nodejs-currentMatch18.0.0-r1os

AND

nodejs-current nodejs-currentMatch17.5.0-r1os

AND

nodejs-current nodejs-currentMatch17.3.1-r0os

AND

nodejs-current nodejs-currentMatch13.12.0-r1os

AND

nodejs-current nodejs-currentMatch17.4.0-r0os

AND

nodejs-current nodejs-currentMatch17.2.0-r0os

AND

nodejs-current nodejs-currentMatch18.3.0-r0os

AND

nodejs-current nodejs-currentMatch17.7.2-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch999

nodejs nodejsMatch16.14.2-r1os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch16.13.2-r1os

AND

nodejs nodejsMatch14.17.2-r0os

AND

nodejs nodejsMatch16.13.2-r0os

AND

nodejs nodejsMatch14.17.6-r1os

AND

nodejs nodejsMatch16.14.2-r0os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch16.15.0-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch16.15.0-r1os

AND

nodejs nodejsMatch12.17.0-r0os

AND

nodejs nodejsMatch14.16.1-r2os

AND

nodejs nodejsMatch12.16.2-r0os

AND

nodejs nodejsMatch14.16.0-r0os

AND

nodejs nodejsMatch16.13.1-r1os

AND

nodejs nodejsMatch14.18.0-r0os

AND

nodejs nodejsMatch16.16.0-r1os

AND

nodejs nodejsMatch14.16.0-r1os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch12.15.0-r1os

AND

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch16.17.0-r0os

AND

nodejs nodejsMatch14.17.0-r0os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch16.15.0-r1os

AND

nodejs nodejsMatch16.14.2-r1os

AND

nodejs nodejsMatch16.15.0-r0os

AND

nodejs nodejsMatch16.16.0-r0os

AND

alpinelinux alpine_linuxMatch3.16

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch14.19.0-r0os

AND

nodejs nodejsMatch14.18.1-r0os

AND

nodejs nodejsMatch14.20.0-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

alpinelinux alpine_linuxMatch3.14

nodejs nodejsMatch14.19.0-r0os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch14.16.1-r1os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.18.1-r0os

AND

nodejs nodejsMatch14.16.0-r0os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.20.0-r0os

AND

alpinelinux alpine_linuxMatch3.13

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch16.14.2-r0os

AND

nodejs nodejsMatch16.13.2-r0os

AND

nodejs nodejsMatch16.14.0-r0os

AND

nodejs nodejsMatch16.13.0-r0os

AND

nodejs nodejsMatch16.16.0-r0os

AND

alpinelinux alpine_linuxMatch3.15

nodejs nodejsMatch12.19.0~dfsg-1debian

AND

debian debian_linuxMatch11

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.5_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.16.0_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.18.2_1.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.20.0_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.15.4_2.el7

rh-nodejs14-nodejs rh-nodejs14-nodejsMatch14.17.2_1.el7

Source	Link
secdb	www.secdb.alpinelinux.org/v3.16/community.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
debian	www.debian.org/security/2023/dsa-5326
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf
hackerone	www.hackerone.com/reports/1675191

12 May 2023 15:35Current

7.8High risk

Vulners AI Score7.8

CVSS 3.16.5

EPSS0.02587