Description

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

Remediation

References

https://hackerone.com/reports/804772

Related Vulnerabilities

CVE-2021-29442 Vulnerability in maven package com.alibaba.nacos:nacos-common

CVE-2021-3804 Vulnerability in npm package taro

CVE-2021-41174 Vulnerability in npm package @grafana/data

CVE-2022-2596 Vulnerability in maven package org.webjars.npm:node-fetch

CVE-2017-16148 Vulnerability in npm package serve46

Severity

High

Classification

CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Patch Third Party Advisory