Lucene search
+L

362 matches found

Github Security Blog
Github Security Blog
added yesterday9 views

undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives

Impact Undici's cache interceptor mishandles optional whitespace OWS placed around the = of a qualified no-cache or private Cache-Control directive, such as no-cache ="authorization" OWS before = or no-cache= "authorization" OWS after =. The parser either drops the directive entirely or stores a...

7.5CVSS7.2AI score0.00229EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder