漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. The payloads can be crafted by an attacker to hijack user sessions, poison cookies, perform clickjacking, and a multitude of other attacks depending on the architecture of the underlying system. The attack was possible due to a bug in processing of carrier-return symbols in the HTTP header names.
漏洞信息
N/A
漏洞
HTTP请求的解释不一致性(HTTP请求私运)
漏洞
Node.js 环境问题漏洞
漏洞信息
Node.js是一个开源、跨平台的 JavaScript 运行时环境。 Node.js 存在环境问题漏洞，该漏洞源于CR-to-Hyphen,攻击者可利用该漏洞绕过限制获取敏感信息。
漏洞信息
N/A
漏洞
N/A