Intrusion PreventionNode.js.llhttp.Module.CVE-2022-32215.HTTP.Request.Smuggling
Description
This indicates an attack attempt to exploit an HTTP Request Smuggling Vulnerability in Node.js.
The vulnerability is due to improper input validation of Transfer-Encoding headers in incoming HTTP requests. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in access to confidential information, passwords and session cookies. In the worst case an attacker could impersonate valid users and gain unrestricted access to the system.
Affected Products
Node.js Node.js 14.x prior to 14.20.1
Node.js Node.js 16.x prior to 16.17.1
Node.js Node.js 18.x prior to 18.9.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://nodejs.org/en/blog/vulnerability/september-2022-security-releases/#http-request-smuggling-due-to-incorrect-parsing-of-multi-line-transfer-encoding-medium-improper-fix-for-cve-2022-32215
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 52469 |
| Created | Dec 29, 2022 |
| Updated | Jun 28, 2023 |
| Risk |
|
| CVE ID | CVE-2022-32215 |
| Exploit Prediction Score | 0.37% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |