Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and Proxy-Authorization headers for `fetch()`, but did not clear them for `undici.request()`. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
References
Configurations
No configuration.
History
19 Apr 2024, 23:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
12 Apr 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary |
|
04 Apr 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-04 16:15
Updated : 2024-04-19 23:15
NVD link : CVE-2024-30260
Mitre link : CVE-2024-30260
CVE.ORG link : CVE-2024-30260
JSON object : View
Products Affected
No product.
CWE
CWE-285
Improper Authorization