Lucene search
Veracode Vulnerability DatabaseVERACODE:7849HistoryNov 20, 2018 - 2:28 a.m.
HTTP Request Smuggling
2018-11-2002:28:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
EPSS
0.005
Percentile
77.0%
node is vulnerable to HTTP request smuggling. Lack of validation for forbidden characters in the headers allows a remote attacker to send a request with a crafted Content-Length value to smuggle HTTP requests and bypass access controls.
Related
prion
prion
Design/Logic Flaw
2016-04-07 21:59:00
f5
f5
K15311661 : NodeJS vulnerability CVE-2016-2086
2016-09-23 00:00:00
cve
cve
CVE-2016-2086
2016-04-07 21:59:01
nessus
nessus
F5 Networks BIG-IP : NodeJS vulnerability (K15311661)
2016-09-26 00:00:00
Fedora 22 : nodejs-0.10.42-4.fc22 (2016-8925b6119f)
2016-03-04 00:00:00
Fedora 23 : nodejs-0.10.42-4.fc23 (2016-3102c11757)
2016-03-04 00:00:00
debiancve
debiancve
CVE-2016-2086
2016-04-07 21:59:01
ubuntucve
ubuntucve
CVE-2016-2086
2016-04-07 00:00:00
cvelist
cvelist
CVE-2016-2086
2016-04-07 21:00:00
nvd
nvd
CVE-2016-2086
2016-04-07 21:59:01
openvas
openvas
Fedora Update for nodejs FEDORA-2016-8925
2016-02-23 00:00:00
Fedora Update for nodejs FEDORA-2016-3102
2016-02-15 00:00:00
Mageia: Security Advisory (MGASA-2016-0080)
2016-02-22 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: nodejs-0.10.42-4.fc22
2016-02-22 20:53:05
[SECURITY] Fedora 23 Update: nodejs-0.10.42-4.fc23
2016-02-15 02:56:03
mageia
mageia
Updated nodejs packages fix security vulnerability
2016-02-19 11:40:43
gentoo
gentoo
Node.js: Multiple vulnerabilities
2016-12-13 00:00:00
nodejsblog
nodejsblog
February 2016 Security Release Summary
2016-02-09 00:00:00
hackerone
hackerone
Internet Bug Bounty: Apache HTTP Request Parsing Whitespace Defects
2017-06-29 17:41:22
Internet Bug Bounty: Multiple HTTP Smuggling reports
2019-07-17 22:47:10
apple
apple
About the security content of Xcode 8.1 - Apple Support
2017-01-23 05:36:06
About the security content of Xcode 8.1
2016-10-27 00:00:00