Lucene search
K

CVE-2021-21321

🗓️ 02 Mar 2021 03:35:25Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 129 Views

fastify-reply-from npm package vulnerability in versions prior to 4.0.2 allows escaping of proxied server prefix, fixed in 4.0.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2021-21321
2 Mar 202104:15
attackerkb
CNNVD
fastify-reply-from 存在输入验证错误漏洞
1 Mar 202100:00
cnnvd
Cvelist
CVE-2021-21321 Prefix escape
2 Mar 202103:35
cvelist
EUVD
EUVD-2021-0698
7 Oct 202500:30
euvd
Github Security Blog
Prefix escape
3 Mar 202101:52
github
Node.js
Prefix escape
3 Mar 202101:55
nodejs
NVD
CVE-2021-21321
2 Mar 202104:15
nvd
OSV
GHSA-QMW8-3V4G-GWJ4 Prefix escape
3 Mar 202101:52
osv
Prion
Design/Logic Flaw
2 Mar 202104:15
prion
RedhatCVE
CVE-2021-21321
23 Mar 202120:37
redhatcve
Rows per page
NVD
Vulners
[
  {
    "product": "fastify-reply-from",
    "vendor": "fastify",
    "versions": [
      {
        "status": "affected",
        "version": "< 4.0.2"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:48Current
9.2High risk
Vulners AI Score9.2
CVSS 27.5
CVSS 3.110
EPSS0.0042
129