cve/2024/CVE-2024-27982.md
2025-09-29 16:08:36 +00:00

829 B

CVE-2024-27982

Description

The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling. Specifically, if a space is placed before a content-length header, it is not interpreted correctly, enabling attackers to smuggle in a second request within the body of the first.

POC

Reference

No PoCs from references.

Github