Lucene search
K

Node.js: Undici does not use CONNECT or otherwise validate upstream HTTPS certificates when using a proxy

🗓️ 27 May 2022 17:49:21Reported by pimterryType 
hackerone
 hackerone
🔗 hackerone.com👁 385 Views

Undici does not use CONNECT or correctly verify upstream HTTPS certificates when using a proxy for global fetc

Related
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-32210
14 Jul 202215:15
attackerkb
Circl
CVE-2022-32210
14 Jul 202218:32
circl
CNNVD
IBM App Connect Enterprise 信任管理问题漏洞
6 Jul 202200:00
cnnvd
CVE
CVE-2022-32210
14 Jul 202214:51
cve
Cvelist
CVE-2022-32210
14 Jul 202214:51
cvelist
Debian CVE
CVE-2022-32210
14 Jul 202214:51
debiancve
EUVD
EUVD-2022-6112
3 Oct 202520:07
euvd
IBM Security Bulletins
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to loss of confidentiality due to CVE-2022-32210
5 Jul 202209:28
ibm
Github Security Blog
ProxyAgent vulnerable to MITM
17 Jun 202201:02
github
NVD
CVE-2022-32210
14 Jul 202215:15
nvd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Jul 2022 14:47Current
6.4Medium risk
Vulners AI Score6.4
EPSS0.00127
385