15 matches found
undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing
A flaw was found in undici. The cache interceptor in undici improperly handles optional whitespace around the equals sign in no-cache or private Cache-Control directives. This vulnerability allows an attacker to bypass cache restrictions, leading to cross-user information disclosure. Specifically...
7.5CVSS6.6AI score0.00396EPSS
SaveExploits0References6
20