Lucene search
Veracode Vulnerability DatabaseVERACODE:7910HistoryNov 30, 2018 - 5:56 a.m.
HTTP Request Smuggling
2018-11-3005:56:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
48.7%
Node.js is vulnerable to HTTP request smuggling. Improper parsing of the path option of an HTTP request allows for a remote attacker to smuggle an HTTP request using Unicode data within the HTTP request, potentially bypassing existing access controls.
Related
prion
prion
Design/Logic Flaw
2018-11-28 17:29:00
openvas
openvas
Node.js 'HTTP Splitting' Privilege Escalation Vulnerability - Mac OS X
2018-11-29 00:00:00
Node.js 'HTTP Splitting' Privilege Escalation Vulnerability - Windows
2018-11-29 00:00:00
openSUSE: Security Advisory for nodejs8 (openSUSE-SU-2019:0089-1)
2019-01-29 00:00:00
ubuntucve
ubuntucve
CVE-2018-12116
2018-11-28 00:00:00
alpinelinux
alpinelinux
CVE-2018-12116
2018-11-28 17:29:00
osv
osv
CVE-2018-12116
2018-11-28 17:29:00
undici before v5.8.0 vulnerable to CRLF injection in request headers
2022-07-21 20:30:10
nodejs vulnerabilities
2021-03-15 21:18:37
redhatcve
redhatcve
CVE-2018-12116
2020-01-07 03:29:53
cve
cve
CVE-2018-12116
2018-11-28 17:29:00
cbl_mariner
cbl_mariner
CVE-2018-12116 affecting package nodejs 8.11.4-7
2021-08-11 06:39:34
nvd
nvd
CVE-2018-12116
2018-11-28 17:29:00
cvelist
cvelist
CVE-2018-12116
2018-11-28 17:00:00
debiancve
debiancve
CVE-2018-12116
2018-11-28 17:29:00
github
github
undici before v5.8.0 vulnerable to CRLF injection in request headers
2022-07-21 20:30:10
nessus
nessus
F5 Networks BIG-IP : Node.js vulnerabilities (K000137093)
2023-10-02 00:00:00
Photon OS 1.0: Nodejs PHSA-2019-1.0-0257
2019-12-31 00:00:00
SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2019:0118-1)
2019-01-22 00:00:00
f5
f5
ibm
ibm
suse
suse
Security update for nodejs8 (important)
2019-01-28 00:00:00
Security update for nodejs4 (important)
2019-01-25 00:00:00
Security update for nodejs6 (important)
2019-02-22 00:00:00
redhat
redhat
(RHSA-2019:1821) Important: rh-nodejs8-nodejs security update
2019-07-22 13:09:06
freebsd
freebsd
node.js -- multiple vulnerabilities
2018-11-27 00:00:00
nodejsblog
nodejsblog
November 2018 Security Releases
2018-11-28 00:00:00
ubuntu
ubuntu
Node.js vulnerabilities
2021-03-15 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-1.0-0257
2019-11-20 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-2.0-0190
2019-11-20 00:00:00
Critical Photon OS Security Update - PHSA-2019-0190
2019-11-20 00:00:00
mageia
mageia
Updated nodejs packages fix security vulnerabilities
2019-09-15 16:24:16
gentoo
gentoo
Node.js: Multiple vulnerabilities
2020-03-20 00:00:00