sublimer@あすてろいどん鯖管 @sublimer@mstdn.sublimer.me
Public

fastify、スキーマのvalidationを迂回される脆弱性があったらしい

Invalid content-type parsing could lead to validation bypass · Advisory · fastify/fastify : 👀
---
github.com/fastify/fastify/sec

### Impact In applications that specify different validation strategies for different content types, it's possible to bypass the validation by providing a _slightly altered_ content type such as...

Invalid content-type parsing could lead to validation bypass

### Impact In applications that specify different validation strategies for different content types, it's possible to bypass the validation by providing a _slightly altered_ content type such as...

github.com · GitHub

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://mstdn.sublimer.me/users/sublimer/statuses/114358540163179248 on your instance and quote it. (Note that quoting is not supported in Mastodon.)