Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87365
HistoryOct 12, 2022 - 12:00 a.m.

Fastify Denial of Service Vulnerability

2022-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
fastify
denial of service
vulnerability
content-type headers
node.js
openjs foundation
exploitation
attackers
application

EPSS

0.002

Percentile

53.4%

Fastify is an open source Web framework for Node.js from the Openjs Foundation.A denial-of-service vulnerability exists in versions of Fastify prior to 4.8.1, which stems from the fact that Content-Type headers can be used maliciously and can be exploited by attackers to send invalid Content-Type headers resulting in an application denial of service.

EPSS

0.002

Percentile

53.4%