Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect [LOW] [7] #197

New issue

Closed

opened 2024-04-08 15:19:08 +01:00 by Helpdesk · 0 comments

Helpdesk commented

2024-04-08 15:19:08 +01:00

Member

Package: undici (npm)
Affected versions: < 5.28.4
Patched versions: 5.28.4

Impact

If an attacker can alter the integrity option passed to fetch(), they can let fetch() accept requests as valid even if they have been tempered.

Patches

Fixes has been released in v5.28.4 and v6.11.1.

Workarounds

Ensure that integrity cannot be tampered with.

References

https://hackerone.com/reports/2377760

Package: undici (npm) Affected versions: < 5.28.4 Patched versions: 5.28.4 --- ## Impact If an attacker can alter the `integrity` option passed to `fetch()`, they can let `fetch()` accept requests as valid even if they have been tempered. ## Patches Fixes has been released in v5.28.4 and v6.11.1. ## Workarounds Ensure that `integrity` cannot be tampered with. ## References https://hackerone.com/reports/2377760