Threats tagged 'ghsa-hg6j-8h7m-3w3j'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 1.2%	CVE-2024-27982The team has identified a critical vulnerability in the http server of the most recent version of Node, where Medium6.5EPSS 1.2%2024-05-07GCVE DatabaseCVE-2024-27982 A critical vulnerability in the HTTP server component of the most recent Node.js version allows HTTP request smuggling via malformed headers. Specifically, a space before a Content-Length header causes incorrect interpretation, enabling attackers to smuggle a second HTTP request within the body of the first. This flaw can lead to integrity and availability impacts. EPSS 1.2%Report on CVE-2024-27982 Vulnerability CWE-444 #ghsa-hg6j-8h7m-3w3j	GCVE Database	2024-05-07

Page 1 of 1