Lucene search

K
cvelistSnykCVELIST:CVE-2022-25881
HistoryJan 31, 2023 - 5:00 a.m.

CVE-2022-25881

2023-01-3105:00:01
snyk
raw.githubusercontent.com
2

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.7%

This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.7%