fastify fastify/reply-from güvenlik açıkları (CVE)

fastify fastify/reply-from için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç
6.9Orta
CVE-2025-66415

fastify-reply-from bypass of reply forwarding

fastify fastify-reply-from

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fas…