2020-02-07 15:01:12 +00:00
|
|
|
{
|
|
|
|
|
"data_type": "CVE",
|
|
|
|
|
"data_format": "MITRE",
|
|
|
|
|
"data_version": "4.0",
|
|
|
|
|
"CVE_data_meta": {
|
|
|
|
|
"ID": "CVE-2019-15605",
|
|
|
|
|
"ASSIGNER": "support@hackerone.com",
|
|
|
|
|
"STATE": "PUBLIC"
|
|
|
|
|
},
|
|
|
|
|
"affects": {
|
|
|
|
|
"vendor": {
|
|
|
|
|
"vendor_data": [
|
|
|
|
|
{
|
|
|
|
|
"vendor_name": "n/a",
|
|
|
|
|
"product": {
|
|
|
|
|
"product_data": [
|
|
|
|
|
{
|
|
|
|
|
"product_name": "https://github.com/nodejs/node",
|
|
|
|
|
"version": {
|
|
|
|
|
"version_data": [
|
|
|
|
|
{
|
|
|
|
|
"version_value": "10.19.0, 12.15.0, 13.8.0"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"problemtype": {
|
|
|
|
|
"problemtype_data": [
|
|
|
|
|
{
|
|
|
|
|
"description": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
|
|
|
|
"value": "HTTP Request Smuggling (CWE-444)"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"references": {
|
|
|
|
|
"reference_data": [
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://hackerone.com/reports/735748",
|
|
|
|
|
"url": "https://hackerone.com/reports/735748"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "CONFIRM",
|
|
|
|
|
"name": "https://nodejs.org/en/blog/release/v13.8.0/",
|
|
|
|
|
"url": "https://nodejs.org/en/blog/release/v13.8.0/"
|
2020-02-09 04:01:07 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "FEDORA",
|
|
|
|
|
"name": "FEDORA-2020-3838c8ea98",
|
|
|
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLB676PDU4RJQLWQUA277YNGYYNEYGWO/"
|
2020-02-10 17:01:13 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "CONFIRM",
|
|
|
|
|
"name": "https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/",
|
|
|
|
|
"url": "https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "CONFIRM",
|
|
|
|
|
"name": "https://nodejs.org/en/blog/release/v10.19.0/",
|
|
|
|
|
"url": "https://nodejs.org/en/blog/release/v10.19.0/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "CONFIRM",
|
|
|
|
|
"name": "https://nodejs.org/en/blog/release/v12.15.0/",
|
|
|
|
|
"url": "https://nodejs.org/en/blog/release/v12.15.0/"
|
2020-02-23 03:01:06 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "FEDORA",
|
|
|
|
|
"name": "FEDORA-2020-47efc31973",
|
|
|
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CT3WTR4P5VAJ3GJGKPYEDUPTNZ3IEDUR/"
|
2020-02-24 17:01:08 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "CONFIRM",
|
|
|
|
|
"name": "https://security.netapp.com/advisory/ntap-20200221-0004/",
|
|
|
|
|
"url": "https://security.netapp.com/advisory/ntap-20200221-0004/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0573",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0573"
|
2020-02-25 11:01:07 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0579",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0579"
|
2020-02-25 17:01:15 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0597",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0597"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0598",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0598"
|
2020-02-25 19:01:09 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0602",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0602"
|
2020-03-04 01:01:10 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "SUSE",
|
|
|
|
|
"name": "openSUSE-SU-2020:0293",
|
|
|
|
|
"url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00008.html"
|
2020-03-11 12:01:25 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0703",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0703"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0707",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0707"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0708",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0708"
|
2020-02-07 15:01:12 +00:00
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"description": {
|
|
|
|
|
"description_data": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
|
|
|
|
"value": "HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
