Vulnetix
Try Vulnetix Request Demo
BIT-node-2022-35256 PUBLISHED CVSS 6.5 MEDIUM

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected Products

VendorProductVersions
Bitnaminode14.0.0, 14.15.0, 16.0.0

Timeline

References

Open in Interactive Console →