CVE-2021-21321
Critical
Description
fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-reply-from before version 4.0.2, by crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is "/pub/", a user expect that accessing "/priv" on the target service would not be possible. In affected versions, it is possible. This is fixed in version 4.0.2.
SeverityCritical
CVSS10.0
Exploit probability—
ProductFastify-reply-from
PublishedMar 2, 2021
First seenMar 2, 2021
Weakness typeCWE-20Improper input validation
How to fix
Update
- fastify-reply-from_project fastify-reply-from4.0.2 or later
- fastify-reply-from4.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fastify-reply-from_project fastify-reply-from | v < 4.0.2 | 4.0.2 |
| fastify-reply-fromnpm | v < 4.0.2 | 4.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.