Undici is an HTTP/1.1 client,... CVE-2024-30261
-
AV
AC
AU
C
I
A
发布：
2024-04-04
修订：
2024-12-18
Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to accept requests as valid even if they have been tampered. This vulnerability was patched in version(s) 5.28.4 and 6.11.1.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有5条受影响产品信息
