Описание
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-origin redirects, but did not clear Proxy-Authentication headers. This issue has been patched in versions 5.28.3 and 6.6.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Ссылки
- Third Party Advisory
- Patch
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Patch
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Одно из
EPSS
3.9 Low
CVSS3
4.5 Medium
CVSS3
Дефекты
Связанные уязвимости
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-origin redirects, but did not clear `Proxy-Authentication` headers. This issue has been patched in versions 5.28.3 and 6.6.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-origin redirects, but did not clear `Proxy-Authentication` headers. This issue has been patched in versions 5.28.3 and 6.6.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Proxy-Authorization header not cleared on cross-origin redirect in fetch in Undici
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici ...
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
EPSS
3.9 Low
CVSS3
4.5 Medium
CVSS3