CVE

CVE-2022-32215

CVE-2022-32215

The llhttp parser in the http module in Node v17.6.0 does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).

Source: CVE-2022-32215

Exit mobile version