Lucene search

K
cvelistHackeroneCVELIST:CVE-2020-8192
HistoryJul 30, 2020 - 12:53 p.m.

CVE-2020-8192

2020-07-3012:53:02
CWE-400
hackerone
www.cve.org
3

EPSS

0.001

Percentile

34.1%

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.

CNA Affected

[
  {
    "product": "fastify",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in v2.15.1 and v3.0.0-rc.5. v1 not affected."
      }
    ]
  }
]

EPSS

0.001

Percentile

34.1%