PT-2020-21103

Published

2020-09-04

·

Updated

2020-09-04

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions http-proxy versions prior to 1.18.1
Description The issue allows an HTTP request with a long body to trigger an unhandled exception, causing the proxy server to crash. This occurs when the proxy server sets headers in the proxy request using the proxyReq.setHeader function. An example of a curl request that can trigger this exception is: curl -XPOST http://localhost:3000 -d "$(python -c 'print("x"*1025)')".
Recommendations Upgrade to version 1.18.1 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-6X33-PW7P-HMPQ
Found an issue in the description? Have something to add? Feel free to write us 👾