5.3
Moyenne
CVE-2022-25881 This affects versions of the package http-cache-semantics before 4.1.1
Description
This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server, when that server reads the cache policy from the request using this library.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| http-cache-semantics 4.1 | premières → < 4.1.1 | 4.1.1 |
| org.webjars.npm:http-cache-semantics 4.1 | premières → < 4.1.1 | 4.1.1 |