2 matches found
CVE-2022-31069 Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy
NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to control when Authorization headers should should be forwarded for specific backend services configured by the application developer. This could have resulted in...
5.8CVSS7.4AI score0.00634EPSS
SaveExploits0References4
PT-2022-20504
Name of the Vulnerable Software and Affected Versions @finastra/nestjs-proxy versions prior to 0.7.0 @ffdc/nestjs-proxy affected versions not specified Description The nestjs-proxy library did not have a way to control when Authorization headers should be forwarded for specific backend services...
7.5CVSS0.00634EPSS
SaveExploits0References7
20