CVE-2024-27982
CVE-2024-27982 is a critical vulnerability in the HTTP server of the latest Node version, allowing for HTTP request smuggling. This occurs because malformed headers, specifically a space before the 'content-length' header, are not correctly parsed. This allows attackers to inject a second, malicious request within the body of an initial, legitimate request. With an SVRS of 30, while not immediately critical, this security flaw should be addressed as part of routine patching and vulnerability management. The presence of this vulnerability can lead to server compromise, data theft, and other severe attacks. Correctly configured and patched servers are not vulnerable, but default installations may require review.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.