Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-31151— Uncleared cookies on cross-host/cross-origin redirect in undici

Quick assessment

Affected
nodejs undici
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

undici是一个HTTP/1.1客户端。 undici 存在输入验证错误漏洞，该漏洞源于规范中发现的cookie头是敏感头和官方头，仍然没有被清除。在undici中有使用cookie头的活跃用户。这可能会导致cookie意外泄漏到第三方网站或允许能够控制重定向目标的恶意攻击者泄漏cookie到第三方网站。

CVSS 3.7 · Low EPSS 0.74% · P53

Possible ATT&CK Techniques 1 AI

T1005 · Data from Local System
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-31151

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Uncleared cookies on cross-host/cross-origin redirect in undici
Source: CVE Program / CVE List V5
Vulnerability Description
Authorization headers are cleared on cross-origin redirect. However, cookie headers which are sensitive headers and are official headers found in the spec, remain uncleared. There are active users using cookie headers in undici. This may lead to accidental leakage of cookie to a 3rd-party site or a malicious attacker who can control the redirection target (ie. an open redirector) to leak the cookie to the 3rd party site. This was patched in v5.7.1. By default, this vulnerability is not exploitable. Do not enable redirections, i.e. `maxRedirections: 0` (the default).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Source: CVE Program / CVE List V5
Vulnerability Title
undici 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
undici是一个HTTP/1.1客户端。 undici 存在输入验证错误漏洞，该漏洞源于规范中发现的cookie头是敏感头和官方头，仍然没有被清除。在undici中有使用cookie头的活跃用户。这可能会导致cookie意外泄漏到第三方网站或允许能够控制重定向目标的恶意攻击者泄漏cookie到第三方网站。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
nodejs undici < 5.7.1 -

II. Public POCs for CVE-2022-31151

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-31151

请登录查看更多情报信息。

Vendor Advisories for CVE-2022-31151 (2)

Other References for CVE-2022-31151 (2)

IV. Related Vulnerabilities

Same product: undici
Same vendor: nodejs
Same weakness: CWE-601

V. Comments for CVE-2022-31151

No comments yet

Leave a comment