Aller au contenu
en Se connecter
6.9 Moyenne

CVE-2025-66415 fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server

Description

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.

Produits et versions touchés

Produit Versions touchées Corrigé en
fastify-reply-from 12.5 premières → < 12.5.0 12.5.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de fastify-reply-from

Les 3 CVE de fastify-reply-from →
CVE-2023-51701 fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server 5.3 Moyenne CVE-2021-21321 fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server 10.0 Critique
Suivre cette CVE