CVE-2023-51701
Medium
Description
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with `@fastify/reply-from` could misinterpret the incoming body by passing an header `ContentType: application/json ; charset=utf-8`. This can lead to bypass of security checks. This vulnerability has been patched in '@fastify/reply-from` version 9.6.0.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Fastify Reply-from
PublishedJan 8, 2024
First seenJan 8, 2024
Weakness typeCWE-444CWE-444
How to fix
Update
- fastify reply-from9.6.0 or later
- @fastify/reply-from9.6.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fastify reply-from | v < 9.6.0 | 9.6.0 |
| @fastify/reply-fromnpm | v < 9.6.0 | 9.6.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.