CVE-2019-15606

Publication date

2020-02-07 14:58:08

Family

hackerone

State

PUBLISHED

Description

Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons