Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/26 4:52 p.m.11 views

srvx is vulnerable to middleware bypass via absolute URI in request line

Summary A pathname parsing discrepancy in srvx's FastURL allows middleware bypass on the Node.js adapter when a raw HTTP request uses an absolute URI with a non-standard scheme e.g. file://. Details When Node.js receives an absolute URI in the request line e.g. GET file://hehe?/internal/run...

6.5CVSS5.8AI score0.00246EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder