Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2020-8287
Description:Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling.
Test IDs: 1.3.6.1.4.1.25623.1.1.4.2021.0224.1   1.3.6.1.4.1.25623.1.0.853695   1.3.6.1.4.1.25623.1.1.4.2021.0121.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-8287
Debian Security Information: DSA-4826 (Google Search)
https://www.debian.org/security/2021/dsa-4826
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H472D5HPXN6RRXCNFML3BK5OYC52CXF2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K4I6MZNC7C7VIDQR267OL4TVCI3ZKAC4/
https://security.gentoo.org/glsa/202101-07
https://hackerone.com/reports/1002188
https://hackerone.com/reports/1002188
https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujan2021.html




© 1998-2021 E-Soft Inc. All rights reserved.