Vulnerabilidades de fastify fastify/reply-from (CVE)

Registros CVE publicados para fastify fastify/reply-from, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
6.9Media
CVE-2025-66415

fastify-reply-from bypass of reply forwarding

fastify fastify-reply-from

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fas…