1 matches found
CRLF Injection
undici is vulnerable to CRLF Injection. The vulnerability exists because the headers.host string does not properly sanitize the HTTP header in the processHeader function in request.js, allowing an attacker to redirect to a malicious URL through a malicious HTTP header...
6.5CVSS6.3AI score0.01129EPSS
SaveExploits1References4Affected Software2
20