Lucene search
Redhat.comRH:CVE-2018-12116HistoryJan 07, 2020 - 3:29 a.m.
CVE-2018-12116
2020-01-0703:29:53
redhat.com
access.redhat.com
13
EPSS
0.001
Percentile
48.6%
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the path option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.
Related
prion
prion
Design/Logic Flaw
2018-11-28 17:29:00
ubuntucve
ubuntucve
CVE-2018-12116
2018-11-28 00:00:00
alpinelinux
alpinelinux
CVE-2018-12116
2018-11-28 17:29:00
osv
osv
CVE-2018-12116
2018-11-28 17:29:00
undici before v5.8.0 vulnerable to CRLF injection in request headers
2022-07-21 20:30:10
nodejs vulnerabilities
2021-03-15 21:18:37
openvas
openvas
Node.js 'HTTP Splitting' Privilege Escalation Vulnerability - Mac OS X
2018-11-29 00:00:00
Node.js 'HTTP Splitting' Privilege Escalation Vulnerability - Windows
2018-11-29 00:00:00
openSUSE: Security Advisory for nodejs8 (openSUSE-SU-2019:0089-1)
2019-01-29 00:00:00
cve
cve
CVE-2018-12116
2018-11-28 17:29:00
nvd
nvd
CVE-2018-12116
2018-11-28 17:29:00
cbl_mariner
cbl_mariner
CVE-2018-12116 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
veracode
veracode
HTTP Request Smuggling
2018-11-30 05:56:50
debiancve
debiancve
CVE-2018-12116
2018-11-28 17:29:00
cvelist
cvelist
CVE-2018-12116
2018-11-28 17:00:00
github
github
undici before v5.8.0 vulnerable to CRLF injection in request headers
2022-07-21 20:30:10
nessus
nessus
F5 Networks BIG-IP : Node.js vulnerabilities (K000137093)
2023-10-02 00:00:00
Photon OS 1.0: Nodejs PHSA-2019-1.0-0257
2019-12-31 00:00:00
Photon OS 2.0: Nodejs PHSA-2019-2.0-0190
2024-07-22 00:00:00
f5
f5
ibm
ibm
suse
suse
Security update for nodejs8 (important)
2019-01-28 00:00:00
Security update for nodejs6 (important)
2019-02-22 00:00:00
Security update for nodejs4 (important)
2019-01-25 00:00:00
redhat
redhat
(RHSA-2019:1821) Important: rh-nodejs8-nodejs security update
2019-07-22 13:09:06
freebsd
freebsd
node.js -- multiple vulnerabilities
2018-11-27 00:00:00
nodejsblog
nodejsblog
November 2018 Security Releases
2018-11-28 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
photon
photon
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00