[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fM60sE-ouUoWnDo0UBjkO4nZ2KNcDk2l8Or-dZZPkHQM":3,"g5a-risk:CVE-2022-31150":116},{"success":4,"data":5,"meta":113},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":45,"references":46,"referencesCount":65,"weaknesses":66,"weaknessesCount":45,"isActivelyExploited":75,"cisaInfo":26,"otxData":26,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":111,"notableEvents":112},"CVE-2022-31150","What is CVE-2022-31150?","undici is an HTTP\u002F1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5.7.1. A fix was released in version 5.8.0. Sanitizing all HTTP headers from untrusted sources to eliminate `\\r\\n` is a workaround for this issue.","undici is an HTTP\u002F1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than ...","2022-07-19T21:15:15.16","2022-10-28T18:31:31.273",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,2.5,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":35},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",5.3,1.4,0.01515,[36,36,36,36,36,36,36],"Medium",[40],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"nodejs","undici","*","cpe:2.3:a:nodejs:undici:*:*:*:*:*:node.js:*:*",1,[47,53,57,61],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Freleases\u002Ftag\u002Fv5.8.0","GitHub",[51,52],"Release Notes","Third Party Advisory",{"url":54,"source":49,"tags":55},"https:\u002F\u002Fgithub.com\u002Fnodejs\u002Fundici\u002Fsecurity\u002Fadvisories\u002FGHSA-3cvr-822r-rqcc",[56,52],"Exploit",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fhackerone.com\u002Freports\u002F409943","Hackerone",[56,52],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20220915-0002\u002F","Netapp",[52],4,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-93","Improper Neutralization of CRLF Sequences ('CRLF Injection')","The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.","","Draft","Base","Simple",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2022-31150? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-31150, a medium severity cyber security vulnerability from 2022. undici is an HTTP\u002F1.1 client, written from scratch for No...","CVE-2022-31150, CVE-2022-31150 vulnerability, CVE-2022-31150 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, nodejs security, undici vulnerability","\u002Fwhat-is\u002Fcve-2022-31150",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-31150","Cybersecurity","CVE-2022-31150, CVE-2022-31150 vulnerability, CVE-2022-31150 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":26,"Negate":26,"Nodes":104},[105],{"Operator":106,"Negate":26,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":110,"VersionEndIncluding":26},"9673DD56-07E3-4AA7-A2E1-BAF0D820DFA0","5.8.0",[],[],{"lastModified":11,"cacheTime":114,"version":115},1792344836934,"2.0",{"score":117,"band":38,"action":118,"scoredAt":119},52,"Plan remediation","2026-10-16T06:55:10.767575+00:00"]