Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-32215
HistoryJul 14, 2022 - 3:15 p.m.

Design/Logic Flaw

2022-07-1415:15:00
PRIOn knowledge base
www.prio-n.com
6

6.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).