Node.js · Report #735748

HTTP request smuggling using malformed Transfer-Encoding header

Validstatus

criticalseverity

105upvotes

7 Mar 2020disclosed

How it was found

Please see the attached PDF for a writeup of this vulnerability.

Please see the attached PDF for a writeup of this vulnerability.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original