HTTP Response Splitting

🗓️ 24 Sep 2018 05:08:11Reported by Veracode Vulnerability DatabaseType

nodejs HTTP response splitting vulnerabilit

Reporter	Title	Published	Views	Family All 75
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™ in IBM Bluemix	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect IBM Business Process Manager (BPM) Configuration Editor	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affects IBM API Connect (CVE-2016-7099, CVE-2016-5325)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL and Non-OpenSSL vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux	3 Aug 201804:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL and Non-OpenSSL vulnerabilities in Node.js included in Rational Application Developer for WebSphere Software	5 Feb 202000:09	–	ibm
CNVD	Joyent Node.js CRLF Injection Vulnerability	13 Oct 201600:00	–	cnvd
CVE	CVE-2016-5325	10 Oct 201616:00	–	cve
Cvelist	CVE-2016-5325	10 Oct 201616:00	–	cvelist
Debian CVE	CVE-2016-5325	10 Oct 201616:00	–	debiancve

Vulners

Node

node nodeRange0.10.0–0.10.46js

node nodeRange0.12.0–0.12.15js

node nodeRange4.0.0–4.5.0js

node nodeRange6.0.0–6.6.0js

nodejs nodejsMatch0.10.36_3.el7ost

nodejs node.jsRange0.10.21–0.10.36js

nodejs node.jsRange0.12.0–0.12.5js

nodejs node.jsRange4.0.0–4.2.3js

Source	Link
nodejs	www.nodejs.org/en/blog/release/v4.6.0/
github	www.github.com/nodejs/node/commit/b5c57ff772aff6cdee79206a2d53da6c638cbd13
nodejs	www.nodejs.org/en/blog/release/v6.7.0/

15 May 2019 06:18Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 36.1

EPSS0.00985