Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2026/08/29 2:29 p.m.5 views

fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...

7.5CVSS5.9AI score0.00234EPSS
SaveExploits0References6
Rows per page
Query Builder