BugTraq
Safebreach adsivory: Node.js HTTP Response Splitting (CVE-2016-2216) Feb 09 2016 06:27PM
Amit Klein (aksecurity gmail com)
Dear list

Safebreach just published an advisory on HTTP Response Splitting
vulnerability in Node.js:
http://info.safebreach.com/hubfs/Node-js-Response-Splitting.pdf

The advisory is accompanied by a blog post:
http://blog.safebreach.com/2016/02/09/http-response-splitting-in-node-js
-root-cause-analysis/

Node.js has fixed versions ready to download, see:
https://nodejs.org/en/blog/vulnerability/february-2016-security-releases
/

Thanks,
-Amit

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus