1 matches found
Double Decoding of the Same Data
Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Double Decoding of the Same Data through hostname normalization in normalize and resolve and the authority recomposition logic in index.js and lib/utils.js. An attacker can redirect an...
8.7CVSS5.6AI score0.0022EPSS
SaveExploits0References2
20