CVE-2022-35949

undici is an HTTP/1.1 client, written from scratch for Node.js."undici" is vulnerable to SSRF Server-side Request Forgery when an application takes in user input into the "path/pathname" option of "undici.request". If a user specifies a URL such as "http://127.0.0.1" or "//127.0.0.1" "js const...

PT-2022-23052

Name of the Vulnerable Software and Affected Versions undici versions prior to 5.8.1 Description The issue is related to Server-side Request Forgery SSRF when an application takes in user input into the path/pathname option of undici.request. If a user specifies a URL such as http://127.0.0.1 or...

CVE-2022-35949: Server-Side Request Forgery (SSRF)

undici is an HTTP/1.1 client, written from scratch for Node.js.undici is vulnerable to SSRF Server-side Request Forgery when an application takes in user input into the path/pathname option of undici.request. If a user specifies a URL such as http://127.0.0.1 or //127.0.0.1 js const undici =...