3 matches found
undici: undici: HTTP response splitting via retry interceptor
A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in the retry interceptor, which incorrectly appends data to a ranged retry response. This can cause the response body to be longer than the Content-Length observed by the application. Consequently, an...
3.7CVSS5.8AI score0.00239EPSS
SaveExploits0References6
20