CVE-2018-12116
- Source
- https://cve.org/CVERecord?id=CVE-2018-12116
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12116.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-12116
- Downstream
- Related
- Published
- 2018-11-28T17:29:00.230Z
- Modified
- 2026-03-15T22:19:03.026346Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the
pathoption of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server. - References
Affected packages
Git / github.com/nodejs/node
Affected ranges
- Type
- GIT
- Repo
- https://github.com/nodejs/node
- Events
-
IntroducedLast affectedIntroducedFixedIntroducedLast affectedIntroducedFixed
- Database specific
{ "versions": [ { "introduced": "6.0.0" }, { "last_affected": "6.8.1" }, { "introduced": "6.9.0" }, { "fixed": "6.15.0" }, { "introduced": "8.0.0" }, { "last_affected": "8.8.1" }, { "introduced": "8.9.0" }, { "fixed": "8.14.0" } ] }
Affected versions
v6.*
v6.0.0
v6.1.0
v6.10.0
v6.10.1
v6.10.2
v6.10.3
v6.11.0
v6.11.1
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.12.0
v6.12.1
v6.12.2
v6.12.3
v6.13.0
v6.13.1
v6.14.0
v6.14.1
v6.14.2
v6.14.3
v6.14.4
v6.2.0
v6.2.1
v6.2.2
v6.3.0
v6.3.1
v6.4.0
v6.5.0
v6.6.0
v6.7.0
v6.8.0
v6.8.1
v6.9.0
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5
v8.*
v8.0.0
v8.1.0
v8.1.1
v8.1.2
v8.1.3
v8.1.4
v8.10.0
v8.11.0
v8.11.1
v8.11.2
v8.11.3
v8.11.4
v8.12.0
v8.13.0
v8.2.0
v8.2.1
v8.3.0
v8.4.0
v8.5.0
v8.6.0
v8.7.0
v8.8.0
v8.8.1
v8.9.0
v8.9.1
v8.9.2
v8.9.3
v8.9.4
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12116.json"
unresolved_ranges
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8"
}
]
}
]