Test ID:	1.3.6.1.4.1.25623.1.0.813472
Category:	General
Title:	Node.js Improper Input Validation Vulnerability (Mar 2018) - Windows
Summary:	Node.js is prone to an improper input validation; vulnerability.
Description:	Summary: Node.js is prone to an improper input validation vulnerability. Vulnerability Insight: The flaw exists due to error in the HTTP parser which ignores spaces in the Content-Length header, allowing input such as Content-Length: 1 2 to be interpreted as having a value of 12. Vulnerability Impact: Successful exploitation will allow remote attackers to send spaces in the Content-Length header and bypass 'Content-Length' restriction policy. Affected Software/OS: Node.js versions 4.x prior to 4.9.0, 6.x prior to 6.14.0, 8.x prior to 8.11.0 and 9.x prior to 9.10.0. Solution: Update to version 4.9.0, 6.14.0, 8.11.0, 9.10.0 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7159 RedHat Security Advisories: RHSA-2019:2258 https://access.redhat.com/errata/RHSA-2019:2258
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.