Skip to content
fr Sign in
6.9 Medium

CVE-2025-66415 fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server

Description

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.

Affected products and versions

Product Affected versions Fixed in
fastify-reply-from 12.5 earliest → < 12.5.0 12.5.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of fastify-reply-from

The 3 CVEs of fastify-reply-from →
CVE-2023-51701 fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server 5.3 Medium CVE-2021-21321 fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server 10.0 Critical
Track this CVE