CVE-2020-7764: Web Cache Poisoning in find-my-way
Summary
CVE-2020-7764: Web Cache Poisoning in find-my-way. Affects find-my-way across 2 version ranges.
< 2.2.5
>= 3.0.0, < 3.0.5
Fixed in 2.2.5 or 3.0.5, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The find-my-way package is an npm package used for routing in web applications. It provides a lightweight and efficient routing solution. The package accepts the 'Accept-Version' header by default, which can be used for versioned routes. However, if versioned routes are not being used, this can lead to a denial of service vulnerability. An attacker can exploit this vulnerability through cache poisoning attacks by using the 'Accept-Version' header as an unkeyed header.
Vulnerability Detail
The vulnerability in find-my-way allows for web cache poisoning attacks. By manipulating the 'Accept-Version' header, an attacker can poison the cache and cause a denial of service. This can lead to the disruption of service availability and potentially impact the performance of the application. The vulnerability has a CVSS score of 5.9, indicating a moderate severity.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 2.2.52.2.5npm install find-my-way@2.2.5 -
>= 3.0.0, < 3.0.53.0.5npm install find-my-way@3.0.5
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
If updating the package is not immediately feasible, a workaround can be implemented by explicitly disabling the 'Accept-Version' header in the application's configuration. This can be done by removing or disabling the code that handles the 'Accept-Version' header in the routing logic.
Conclusion
The find-my-way package is vulnerable to web cache poisoning attacks due to the default acceptance of the 'Accept-Version' header. It is crucial to update the package to the fixed versions or implement the workaround to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for find-my-way →
FAQ
find-my-way is an npm package used for routing in web applications. It provides a lightweight and efficient routing solution.
Web cache poisoning is a type of attack where an attacker manipulates the cache of a web application to serve malicious content or disrupt the normal functioning of the application.
An attacker can exploit this vulnerability by sending malicious requests with manipulated 'Accept-Version' headers, which can poison the cache and cause a denial of service.
This vulnerability can lead to a denial of service, impacting the availability and performance of the application. It can also potentially expose sensitive information if the cache is compromised.
The vulnerability has a CVSS score of 5.9, indicating a moderate severity.
References
Related vulnerabilities
Recent vulnerabilities recorded for find-my-way.
