Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to accept requests as valid even if they have been tampered. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
References
Configurations
No configuration.
History
19 Apr 2024, 23:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
12 Apr 2024, 02:15
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
References |
|
04 Apr 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-04 15:15
Updated : 2024-04-19 23:15
NVD link : CVE-2024-30261
Mitre link : CVE-2024-30261
CVE.ORG link : CVE-2024-30261
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control