Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2020-8201 | First vendor Publication | 2020-09-18 |
| Vendor | Cve | Last vendor Modification | 2023-11-07 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | |||
|---|---|---|---|
| Overall CVSS Score | 7.4 | ||
| Base Score | 7.4 | Environmental Score | 7.4 |
| impact SubScore | 5.2 | Temporal Score | 7.4 |
| Exploitabality Sub Score | 2.2 | ||
| Attack Vector | Network | Attack Complexity | High |
| Privileges Required | None | User Interaction | None |
| Scope | Unchanged | Confidentiality Impact | High |
| Integrity Impact | High | Availability Impact | None |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5.8 | Attack Range | Network |
| Cvss Impact Score | 4.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. The payloads can be crafted by an attacker to hijack user sessions, poison cookies, perform clickjacking, and a multitude of other attacks depending on the architecture of the underlying system. The attack was possible due to a bug in processing of carrier-return symbols in the HTTP header names. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8201 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') |
CPE : Common Platform Enumeration
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-02-02 02:19:33 |
|
| 2024-02-01 12:21:54 |
|
| 2023-11-07 21:36:47 |
|
| 2023-09-05 13:13:52 |
|
| 2023-09-05 01:21:29 |
|
| 2023-09-02 13:12:40 |
|
| 2023-09-02 01:21:48 |
|
| 2023-08-22 13:04:59 |
|
| 2022-10-11 01:20:46 |
|
| 2022-05-24 21:27:43 |
|
| 2021-05-04 14:06:21 |
|
| 2021-04-22 03:11:23 |
|
| 2021-01-11 17:23:02 |
|
| 2020-12-13 09:22:51 |
|
| 2020-10-09 17:22:59 |
|
| 2020-10-07 21:23:14 |
|
| 2020-10-05 17:23:00 |
|
| 2020-10-01 21:23:15 |
|
| 2020-09-30 00:22:55 |
|
| 2020-09-21 17:22:58 |
|
| 2020-09-19 05:22:57 |
|
