Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Web Cache Poisoning
Vulnerability Description
This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by default, and if versioned routes are not being used, this could lead to a denial of service. Accept-Version can be used as an unkeyed header in a cache poisoning attack.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
N/A
Vulnerability Title
Delvedor find-my-way 环境问题漏洞
Vulnerability Description
Delvedor find-my-way是Delvedor团队的一个提供路由功能的 NPM 代码库。 Delvedor find-my-way 2.2.5之前版本,3.0.0版本至3.0.5之前版本存在安全漏洞，该漏洞源于它接受Accept-Version头，如果没有使用版本化的路由，这可能导致拒绝服务。在缓存中毒攻击中，Accept-Version可以用作一个未加密的头文件。
CVSS Information
N/A
Vulnerability Type
N/A