fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with `@fastify/reply-from` could misinterpret the incoming body by passing an header `ContentType: application/json ; charset=utf-8`. This can lead to bypass of security checks. This vulnerability has been patched in '@fastify/reply-from` version 9.6.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NFastify Reply From
APPFastify< 9.6.0
Related vulnerabilities
Usuwanie nagłówków proxy przez manipulację nagłówkiem Connection w @fastify/reply-from
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0,...
@fastify/middie versions 9.1.0 through 9.3.2 decode the encoded slash %2F inside path parameter values before ...
@fastify/express versions 4.0.6 and earlier only rewrite the plugin prefix for middleware mount paths when the...
Pominięcie uwierzytelnienia w @fastify/middie — brak dziedziczenia middleware