Lucene search
Veracode Vulnerability DatabaseVERACODE:29552HistoryMar 03, 2021 - 6:00 a.m.
Authorization Bypass
2021-03-0306:00:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
60.9%
fastify-reply-from is vulnerable to authorization bypass. An attacker is able to escape the prefix of the proxied backend service and access restricted service such as the parent of the base URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fastify-reply-from | le | 4.0.2 |
Related
github
github
Prefix escape
2021-03-03 01:52:05
osv
osv
CVE-2021-21321
2021-03-02 04:15:12
Prefix escape
2021-03-03 01:52:05
cvelist
cvelist
CVE-2021-21321 Prefix escape
2021-03-02 03:35:25
cve
cve
CVE-2021-21321
2021-03-02 04:15:12
redhatcve
redhatcve
CVE-2021-21321
2021-03-23 20:37:26
nodejs
nodejs
Prefix escape
2021-03-03 01:55:12
prion
prion
Design/Logic Flaw
2021-03-02 04:15:00
nvd
nvd
CVE-2021-21321
2021-03-02 04:15:12
redhat
redhat