Lucene search
+L

41 matches found

Veracode
Veracode
•added 2026/10/23 5:07 a.m.•7 views

Nuxt: Route Rules Are Matched Against The Raw Request Path, So A Percent-encoded Segment Can Bypass `appMiddleware` On D

Summary Nuxt compared "routeRules" keys against the raw request path, without decoding percent-encoding, while the router decodes parameters when it resolves a route. A request whose path is percent-encoded can therefore resolve to a page while failing to match the route rule meant to protect it,...

6.5CVSS5.8AI score0.00363EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder