Node.js: Usage of unsafe random function in undici for choosing boundary
Discription

The vulnerability in the Undici library involves the use of an unsafe random function to choose the boundary for a multipart/form-data request. The use of Math.random() to generate this boundary can be predicted if several of its generated values are known. This could potentially allow an attacker to add or overwrite fields in the multipart request that were not intended to be…Read More
References
Back to Main