| ID |
CVE-2024-27982
|
| Sažetak |
The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling. Specifically, if a space is placed before a content-length header, it is not interpreted correctly, enabling attackers to smuggle in a second request within the body of the first. |
| Reference |
|
| CVSS |
| Base: | 6.5 |
| Impact: | 2.5 |
| Exploitability: | 3.9 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| NONE |
LOW |
LOW |
|
| CVSS vektor |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
| Zadnje važnije ažuriranje |
19-04-2025 - 01:15 |
| Objavljeno |
07-05-2024 - 17:15 |
