Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86307
HistoryNov 24, 2022 - 12:00 a.m.

Fastify cross-site request forgery vulnerability

2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
fastify
node.js
openjs foundation
csrf
vulnerability
content-type
cors

0.001 Low

EPSS

Percentile

44.8%

Fastify is an open source web framework for Node.js from the OpenJS Foundation.Fastify A cross-site request forgery vulnerability exists in Fastify 3.0.0 and later, versions prior to 3.29.4, 4.0.0 and later, and versions prior to 4.10.2, which can be exploited to bypass checks by using the wrong Content-Type. The vulnerability can be exploited to launch cross-site request forgery attacks by using the wrong Content-Type to bypass checks and then bypass CORS protection.

0.001 Low

EPSS

Percentile

44.8%