progfay/nodejs-http-transfer-encoding-smuggling-poc

PoC

PoC of HTTP Request Smuggling in nodejs (CVE-2020-8287)

view exploit source poc_in_githubauthor progfaypublished 2021-01-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-8287US	medium6.5	16.3% (97th)	Exploit	2021-01-06
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, No…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.