Lucene search
Veracode Vulnerability DatabaseVERACODE:29551HistoryMar 03, 2021 - 5:54 a.m.
Authorization Bypass
2021-03-0305:54:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
fastify
authorization bypass
vulnerability
escaping prefix
EPSS
0.003
Percentile
70.7%
fastify-http-proxy is vulnerable to authorization bypass. An attacker is able to escape the prefix of the proxied backend service and access restricted service such as the parent of the base URL.
Related
redhatcve
redhatcve
CVE-2021-21322
2021-03-23 20:30:49
prion
prion
Design/Logic Flaw
2021-03-02 04:15:00
nvd
nvd
CVE-2021-21322
2021-03-02 04:15:12
cve
cve
CVE-2021-21322
2021-03-02 04:15:12
cvelist
cvelist
CVE-2021-21322 Prefix escape
2021-03-02 03:35:17
osv
osv
CVE-2021-21322
2021-03-02 04:15:12
Prefix escape
2021-03-03 02:18:08
nodejs
nodejs
Prefix escape
2021-03-03 02:22:40
github
github
Prefix escape
2021-03-03 02:18:08
redhat
redhat