CVE-2019-15606 PUBLISHED

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons

EPSS 1.34% · 79.9th percentile

Risk Scores

EPSS Score
1.34%
79.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSnodejs0, *, *
Ubuntu:Pro:16.04:LTSnodejs4.2.6~dfsg-1ubuntu4, 0, 0.10.25~dfsg2-2ubuntu1
Ubuntu:Pro:14.04:LTSnodejs0.10.21~dfsg1-1, 0.10.15~dfsg1-4, *

Timeline

References

Open in Interactive Console →