Lucene search
Zeyu2001H1:1630668HistoryJul 08, 2022 - 3:42 a.m.
Internet Bug Bounty: CVE-2022-32213 - HTTP Request Smuggling Due to Flawed Parsing of Transfer-Encoding
2022-07-0803:42:35
zeyu2001
hackerone.com
$1800
37
internet bug bounty
cve-2022-32213
http request smuggling
flawed parsing
transfer-encoding
impact
cache poisoning
bypassing security layers
stealing credentials
EPSS
0.006
Percentile
78.5%
Original Report: https://hackerone.com/reports/1524555
Impact
Depending on the specific web application, HRS can lead to cache poisoning, bypassing of security layers, stealing of credentials and so on.
Related
cbl_mariner
cbl_mariner
CVE-2022-32213 affecting package nodejs for versions less than 16.20.2-4
2022-08-31 06:17:55
CVE-2022-32213 affecting package nodejs 14.18.3-1
2022-08-12 16:45:11
CVE-2022-32213 affecting package rust for versions less than 1.75.0-1
2024-09-30 03:52:35
ubuntucve
ubuntucve
CVE-2022-32213
2022-07-14 00:00:00
hackerone
hackerone
Node.js: HTTP Request Smuggling Due to Flawed Parsing of Transfer-Encoding
2022-03-28 15:08:54
Node.js: CVE-2022-32213 bypass via obs-fold mechanic
2022-07-07 17:14:53
debiancve
debiancve
CVE-2022-32213
2022-07-14 15:15:08
photon
photon
Critical Photon OS Security Update - PHSA-2022-0262
2022-10-12 00:00:00
Moderate Photon OS Security Update - PHSA-2022-4.0-0262
2022-10-12 00:00:00
Critical Photon OS Security Update - PHSA-2022-0426
2022-07-26 00:00:00
nvd
nvd
CVE-2022-32213
2022-07-14 15:15:08
veracode
veracode
HTTP Request Smuggling
2022-07-08 08:18:07
ibm
ibm
osv
osv
llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
2022-07-15 00:00:18
BIT-node-2022-32213
2024-03-06 11:04:08
CVE-2022-32213
2022-07-14 15:15:08
redhatcve
redhatcve
CVE-2022-32213
2022-07-08 19:17:35
nessus
nessus
Photon OS 4.0: Nodejs PHSA-2022-4.0-0262
2024-07-23 00:00:00
SUSE SLES12 Security Update : nodejs14 (SUSE-SU-2022:3516-1)
2022-10-05 00:00:00
openSUSE 15 Security Update : nodejs10 (SUSE-SU-2022:3835-1)
2023-01-20 00:00:00
prion
prion
Code injection
2022-07-14 15:15:00
cvelist
cvelist
CVE-2022-32213
2022-07-14 00:00:00
cve
cve
CVE-2022-32213
2022-07-14 15:15:08
github
github
llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
2022-07-15 00:00:18
alpinelinux
alpinelinux
CVE-2022-32213
2022-07-14 15:15:08
suse
suse
Security update for nodejs14 (moderate)
2022-10-18 00:00:00
Security update for nodejs10 (moderate)
2022-11-01 00:00:00
Security update for nodejs12 (moderate)
2022-10-18 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:3503-1)
2022-10-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3516-1)
2022-10-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3614-1)
2022-10-19 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerability
2022-10-01 20:48:24
Updated nodejs packages fix security vulnerability
2022-08-26 00:21:07
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 16.17.1-alt1
2022-09-30 00:00:00
almalinux
almalinux
Moderate: nodejs:14 security and bug fix update
2022-09-13 00:00:00
Moderate: nodejs and nodejs-nodemon security and bug fix update
2022-09-20 00:00:00
rocky
rocky
nodejs:14 security and bug fix update
2022-09-13 07:36:51
nodejs:16 security and bug fix update
2022-09-13 07:36:52
nodejs and nodejs-nodemon security and bug fix update
2022-09-20 11:37:49
fedora
fedora
[SECURITY] Fedora 35 Update: nodejs-16.18.1-1.fc35
2022-11-29 00:57:02
[SECURITY] Fedora 37 Update: nodejs-18.12.1-1.fc37
2022-11-29 01:13:36
[SECURITY] Fedora 36 Update: nodejs-16.18.1-1.fc36
2022-11-29 01:28:04
redhat
redhat
oraclelinux
oraclelinux
nodejs:14 security and bug fix update
2022-09-15 00:00:00
nodejs:16 security and bug fix update
2022-09-15 00:00:00
nodejs and nodejs-nodemon security and bug fix update
2022-09-22 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2023-11-21 00:00:00
freebsd
freebsd
Node.js -- July 7th 2022 Security Releases
2022-07-05 00:00:00
debian
debian
[SECURITY] [DSA 5326-1] nodejs security update
2023-01-24 20:01:20
nodejsblog
nodejsblog
September 23rd 2022 Security Releases
2022-09-15 00:00:00
July 7th 2022 Security Releases
2022-07-07 00:00:00
ics
ics
Siemens SINEC INS
2023-01-17 12:00:00
gentoo
gentoo
Node.js: Multiple Vulnerabilities
2024-05-08 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00