20 matches found
undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives
Impact Undici's cache interceptor mishandles optional whitespace OWS placed around the = of a qualified no-cache or private Cache-Control directive, such as no-cache ="authorization" OWS before = or no-cache= "authorization" OWS after =. The parser either drops the directive entirely or stores a...
7.5CVSS7.2AI score0.00229EPSS
SaveExploits0References8Affected Software1
20