Beveiligingsadvies

CVE-2024-30261

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-04 15:09:11

Laatst bijgewerkt 2025-11-04 16:11:56

Toegewezen door GitHub_M

CVSS-score 2.6

Status PUBLISHED

Beschrijving

Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to accept requests as valid even if they have been tampered. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.

← Alle CVE's bekijken Bekijk op cve.org ↗