CVE-2018-3711

Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.

Score

CVSS 3.1 7.5 High

Status

Modified - support@hackerone.com

Published

2018-06-07

Last modified

2024-09-16

Weaknesses

CWE-770

Affected products

• Fastify (Fastify)
• Fastify Node Module (Hackerone)

References

• https://github.com/fastify/fastify/pull/627
• https://hackerone.com/reports/303632