Lucene search
Veracode Vulnerability DatabaseVERACODE:27847HistoryNov 09, 2020 - 8:32 a.m.
Cache Poisoning
2020-11-0908:32:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
43.3%
find-my-way is vulnerable to web cache poisoning. The vulnerability exists when it accepts the Accept-Version header by default, and if the versioned routes are not used, it leads to a denial of service(DoS).
| CPE | Name | Operator | Version |
|---|---|---|---|
| find-my-way | le | 2.2.4 | |
| find-my-way | le | 3.0.4 |
Related
cvelist
cvelist
CVE-2020-7764 Web Cache Poisoning
2020-11-08 00:00:00
nvd
nvd
CVE-2020-7764
2020-11-08 16:15:12
cve
cve
CVE-2020-7764
2020-11-08 16:15:12
hackerone
hackerone
ibm
ibm
prion
prion
Design/Logic Flaw
2020-11-08 16:15:00
osv
osv
Web Cache Poisoning in find-my-way
2020-11-09 22:17:13
CVE-2020-7764
2020-11-08 16:15:12
github
github
Web Cache Poisoning in find-my-way
2020-11-09 22:17:13