Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-32214
HistoryJul 14, 2022 - 3:15 p.m.

Crlf injection

2022-07-1415:15:00
PRIOn knowledge base
www.prio-n.com
5

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS).