Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.
References
Link | Resource |
---|---|
https://github.com/fastify/fastify/pull/627 | Exploit Issue Tracking Third Party Advisory |
https://hackerone.com/reports/303632 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
No history.
Information
Published : 2018-06-07 02:29
Updated : 2024-02-04 19:46
NVD link : CVE-2018-3711
Mitre link : CVE-2018-3711
CVE.ORG link : CVE-2018-3711
JSON object : View
Products Affected
fastify
- fastify
CWE
CWE-770
Allocation of Resources Without Limits or Throttling