253 matches found
undici vulnerable to caching and replay of unsafe HTTP method responses
Impact undici's interceptors.cache documents that it caches only safe HTTP methods. However, its internal skip-list is built by subtracting the configured methods from the safe-methods set, so an unsafe method POST, PUT, PATCH, DELETE never lands in the skip-list and is looked up against the cach...
5.3CVSS5.8AI score0.00155EPSS
SaveExploits0References8Affected Software1
20