Lucene search
K

Node.js third-party modules: Default behavior of Fastifys versioned routes can be used for cache poisoning when Fastify is used in combination with a http cache / CDN

🗓️ 03 Nov 2020 20:22:03Reported by trygve_lieType 
hackerone
 hackerone
🔗 hackerone.com👁 100 Views

Fastify v3.x allows cache poisoning when used with a http cache/CDN, by returning a 404 for non-versioned routes with 'Accept-Version' heade

Related

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Dec 2020 16:56Current
6.4Medium risk
Vulners AI Score6.4
EPSS0.00582
100