Описание
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for fetch(), but did not clear them for undici.request(). This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 5.28.4+dfsg1+~cs23.12.11-2 |
| esm-apps/noble | needs-triage | |
| esm-infra/focal | DNE | |
| focal | DNE | |
| jammy | DNE | |
| mantic | ignored | end of life, was needs-triage |
| noble | needs-triage | |
| oracular | ignored | end of life, was needs-triage |
| plucky | not-affected | 5.28.4+dfsg1+~cs23.12.11-2 |
| questing | not-affected | 5.28.4+dfsg1+~cs23.12.11-2 |
Показывать по
Ссылки на источники
3.9 Low
CVSS3
Связанные уязвимости
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for `fetch()`, but did not clear them for `undici.request()`. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for `fetch()`, but did not clear them for `undici.request()`. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici ...
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
3.9 Low
CVSS3