41 matches found
Nuxt: Route Rules Are Matched Against The Raw Request Path, So A Percent-encoded Segment Can Bypass `appMiddleware` On D
Summary Nuxt compared "routeRules" keys against the raw request path, without decoding percent-encoding, while the router decodes parameters when it resolves a route. A request whose path is percent-encoded can therefore resolve to a page while failing to match the route rule meant to protect it,...
6.5CVSS5.8AI score0.00363EPSS
SaveExploits0References5Affected Software1
20