11 matches found
undici: Undici: Cookie attribute injection allows bypassing security protections
A flaw was found in undici, where its setCookie function does not fully sanitize cookie attributes. A remote attacker could exploit this by providing specially crafted input to the domain or unparsed fields, leading to the injection of additional cookie attributes. This vulnerability can allow an...
6.5CVSS7.2AI score0.00176EPSS
SaveExploits0References6
20