{"uuid": "578665c3-01cf-4023-af4d-4f74de1e5498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://t.me/arpsyndicate/4534", "content": "#ExploitObserverAlert\n\nCVE-2024-22019\n\nDESCRIPTION: Exploit Observer has 13 entries in 2 file formats related to CVE-2024-22019. A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS). The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk extension bytes. The issue can cause CPU and network bandwidth exhaustion, bypassing standard safeguards like timeouts and body size limits.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.5817243", "creation_timestamp": "2024-04-12T06:02:54.000000Z"}