PT-2022-23051 · Undici+1 · Undici+1

Happyhacking-K + 1 · Published 2022-08-13 · Updated 2023-03-28 · CVE-2022-35948

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions undici version 5.8.0

Description The issue is related to CRLF Injection on headers when using unsanitized input as request headers, specifically inside the content-type header. This can lead to performing multiple requests in a single API call. For example, using the content-type header with unsanitized input like 'application/jsonr r GET /foo2 HTTP/1.1' can result in two requests: one to http://localhost:3000/ and another to http://localhost:3000/foo2.

Recommendations For undici version 5.8.0, update to version 5.8.1 to resolve the issue. As a temporary workaround, sanitize input when sending content-type headers using user input.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

CWE-93

Related Identifiers

CVE-2022-35948

GHSA-F772-66G8-Q5H3

OPENSUSE-SU-2022_3250-1

OPENSUSE-SU-2022_3251-1

SUSE-SU-2022:3196-1

SUSE-SU-2022:3250-1

SUSE-SU-2022:3251-1

Affected Products

Suse

Undici

References · 27

• 🔥 https://github.com/nodejs/undici/security/advisories/GHSA-f772-66g8-q5h3 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35948.json · Exploit
• https://github.com/nodejs/undici/commit/66165d604fd0aee70a93ed5c44ad4cc2df395f80 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-35948 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3196-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35948 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3250-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3251-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35948 · Security Note
• https://osv.dev/vulnerability/GHSA-f772-66g8-q5h3 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-35948 · Vendor Advisory
• https://github.com/nodejs/undici/releases/tag/v5.8.2 · Note
• https://github.com/nodejs/undici · Note
• https://suse.com/security/cve/CVE-2022-35949 · Note
• https://suse.com/support/update/announcement/2022/suse-su-20223250-1 · Note