Vulnerabilities > CVE-2022-24822 - Unspecified vulnerability in Finn Podium Proxy

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

finn

NVD

Published: 2022-04-06

Updated: 2024-11-21

Summary

Podium is a library for building micro frontends. @podium/layout is a module for building a Podium layout server, and @podium/proxy is a module for proxying HTTP requests from a layout server to a podlet server. In @podium/layout prior to version 4.6.110 and @podium/proxy prior to version 4.2.74, an attacker using the `Trailer` header as part of the request against proxy endpoints has the ability to take down the server. All Podium layouts that include podlets with proxy endpoints are affected. `@podium/layout`, which is the main way developers/users are vulnerable to this exploit, has been patched in version `4.6.110`. All earlier versions are vulnerable.`@podium/proxy`, which is the source of the vulnerability and is used by `@podium/layout` has been patched in version `4.2.74`. All earlier versions are vulnerable. It is not easily possible to work around this issue without upgrading.

Vulnerable Configurations

Part	Description	Count
Application	Finn Finn Podium Proxy - Finn Podium Proxy 2.2.0 Finn Podium Proxy 2.4.3 Finn Podium Proxy 2.4.4 Finn Podium Proxy 2.5.0 Finn Podium Proxy 3.0.0 Finn Podium Proxy 3.0.1 Finn Podium Proxy 3.0.2 Finn Podium Proxy 3.0.3 Finn Podium Proxy 3.0.4 Finn Podium Proxy 4.0.0 Finn Podium Proxy 4.0.1 Finn Podium Proxy 4.0.2 Finn Podium Proxy 4.0.3 Finn Podium Proxy 4.0.4 Finn Podium Proxy 4.0.5 Finn Podium Proxy 4.0.6 Finn Podium Proxy 4.1.0 Finn Podium Proxy 4.1.1 Finn Podium Proxy 4.1.2 Finn Podium Proxy 4.1.3 Finn Podium Proxy 4.1.4 Finn Podium Proxy 4.1.5 Finn Podium Proxy 4.2.0 Finn Podium Proxy 4.2.1 Finn Podium Proxy 4.2.2 Finn Podium Proxy 4.2.3 Finn Podium Proxy 4.2.4 Finn Podium Proxy 4.2.5 Finn Podium Proxy 4.2.6 Finn Podium Proxy 4.2.7 Finn Podium Proxy 4.2.8 Finn Podium Proxy 4.2.9 Finn Podium Proxy 4.2.10 Finn Podium Proxy 4.2.11 Finn Podium Proxy 4.2.12 Finn Podium Proxy 4.2.13 Finn Podium Proxy 4.2.14 Finn Podium Proxy 4.2.15 Finn Podium Proxy 4.2.16 Finn Podium Proxy 4.2.17 Finn Podium Proxy 4.2.18 Finn Podium Proxy 4.2.19 Finn Podium Proxy 4.2.20 Finn Podium Proxy 4.2.21 Finn Podium Proxy 4.2.22 Finn Podium Proxy 4.2.23 Finn Podium Proxy 4.2.24 Finn Podium Proxy 4.2.25 Finn Podium Proxy 4.2.26 Finn Podium Proxy 4.2.27 Finn Podium Proxy 4.2.28 Finn Podium Proxy 4.2.29 Finn Podium Proxy 4.2.30 Finn Podium Proxy 4.2.31 Finn Podium Proxy 4.2.32 Finn Podium Proxy 4.2.33 Finn Podium Proxy 4.2.34 Finn Podium Proxy 4.2.35 Finn Podium Proxy 4.2.36 Finn Podium Proxy 4.2.37 Finn Podium Proxy 4.2.38 Finn Podium Proxy 4.2.39 Finn Podium Proxy 4.2.40 Finn Podium Proxy 4.2.41 Finn Podium Proxy 4.2.42 Finn Podium Proxy 4.2.43 Finn Podium Proxy 4.2.44 Finn Podium Proxy 4.2.45 Finn Podium Proxy 4.2.46 Finn Podium Proxy 4.2.47 Finn Podium Proxy 4.2.48 Finn Podium Proxy 4.2.49 Finn Podium Proxy 4.2.50 Finn Podium Proxy 4.2.51 Finn Podium Proxy 4.2.52 Finn Podium Proxy 4.2.53 Finn Podium Proxy 4.2.54 Finn Podium Proxy 4.2.55 Finn Podium Proxy 4.2.56 Finn Podium Proxy 4.2.57 Finn Podium Proxy 4.2.58 Finn Podium Proxy 4.2.59 Finn Podium Proxy 4.2.60 Finn Podium Proxy 4.2.61 Finn Podium Proxy 4.2.62 Finn Podium Proxy 4.2.63 Finn Podium Proxy 4.2.64 Finn Podium Proxy 4.2.65 Finn Podium Proxy 4.2.66 Finn Podium Proxy 4.2.67 Finn Podium Proxy 4.2.68 Finn Podium Proxy 4.2.69 Finn Podium Proxy 4.2.70 Finn Podium Proxy 4.2.71 Finn Podium Proxy 4.2.72 Finn Podium Proxy 4.2.73 Finn Podium Layout - Finn Podium Layout 2.2.0 Finn Podium Layout 2.4.3 Finn Podium Layout 2.4.4 Finn Podium Layout 2.5.0 Finn Podium Layout 2.5.1 Finn Podium Layout 3.0.0 Finn Podium Layout 3.0.1 Finn Podium Layout 3.0.2 Finn Podium Layout 3.0.3 Finn Podium Layout 3.0.4 Finn Podium Layout 4.0.0 Finn Podium Layout 4.0.1 Finn Podium Layout 4.0.2 Finn Podium Layout 4.0.3 Finn Podium Layout 4.0.4 Finn Podium Layout 4.0.5 Finn Podium Layout 4.0.6 Finn Podium Layout 4.1.0 Finn Podium Layout 4.1.1 Finn Podium Layout 4.1.2 Finn Podium Layout 4.1.3 Finn Podium Layout 4.1.4 Finn Podium Layout 4.1.5 Finn Podium Layout 4.2.0 Finn Podium Layout 4.2.1 Finn Podium Layout 4.2.2 Finn Podium Layout 4.2.3 Finn Podium Layout 4.2.4 Finn Podium Layout 4.2.5 Finn Podium Layout 4.2.6 Finn Podium Layout 4.2.7 Finn Podium Layout 4.2.8 Finn Podium Layout 4.2.9 Finn Podium Layout 4.2.10 Finn Podium Layout 4.2.11 Finn Podium Layout 4.2.12 Finn Podium Layout 4.2.13 Finn Podium Layout 4.2.14 Finn Podium Layout 4.2.15 Finn Podium Layout 4.2.16 Finn Podium Layout 4.2.17 Finn Podium Layout 4.2.18 Finn Podium Layout 4.2.19 Finn Podium Layout 4.2.20 Finn Podium Layout 4.2.21 Finn Podium Layout 4.2.22 Finn Podium Layout 4.2.23 Finn Podium Layout 4.2.24 Finn Podium Layout 4.2.25 Finn Podium Layout 4.2.26 Finn Podium Layout 4.2.27 Finn Podium Layout 4.2.28 Finn Podium Layout 4.2.29 Finn Podium Layout 4.2.30 Finn Podium Layout 4.2.31 Finn Podium Layout 4.2.32 Finn Podium Layout 4.2.33 Finn Podium Layout 4.2.34 Finn Podium Layout 4.2.35 Finn Podium Layout 4.2.36 Finn Podium Layout 4.2.37 Finn Podium Layout 4.2.38 Finn Podium Layout 4.2.39 Finn Podium Layout 4.2.40 Finn Podium Layout 4.2.41 Finn Podium Layout 4.2.42 Finn Podium Layout 4.2.43 Finn Podium Layout 4.2.44 Finn Podium Layout 4.2.45 Finn Podium Layout 4.2.46 Finn Podium Layout 4.2.47 Finn Podium Layout 4.2.48 Finn Podium Layout 4.2.49 Finn Podium Layout 4.2.50 Finn Podium Layout 4.2.51 Finn Podium Layout 4.2.52 Finn Podium Layout 4.2.53 Finn Podium Layout 4.2.54 Finn Podium Layout 4.2.55 Finn Podium Layout 4.2.56 Finn Podium Layout 4.2.57 Finn Podium Layout 4.2.58 Finn Podium Layout 4.2.59 Finn Podium Layout 4.2.60 Finn Podium Layout 4.2.61 Finn Podium Layout 4.2.62 Finn Podium Layout 4.2.63 Finn Podium Layout 4.2.64 Finn Podium Layout 4.2.65 Finn Podium Layout 4.2.66 Finn Podium Layout 4.2.67 Finn Podium Layout 4.2.68 Finn Podium Layout 4.2.69 Finn Podium Layout 4.2.70 Finn Podium Layout 4.2.71 Finn Podium Layout 4.2.72 Finn Podium Layout 4.2.73 Finn Podium Layout 4.2.75 Finn Podium Layout 4.3.0 Finn Podium Layout 4.3.1 Finn Podium Layout 4.4.0 Finn Podium Layout 4.4.1 Finn Podium Layout 4.4.2 Finn Podium Layout 4.4.3 Finn Podium Layout 4.4.4 Finn Podium Layout 4.5.0 Finn Podium Layout 4.5.1 Finn Podium Layout 4.6.0 Finn Podium Layout 4.6.1 Finn Podium Layout 4.6.2 Finn Podium Layout 4.6.3 Finn Podium Layout 4.6.4 Finn Podium Layout 4.6.5 Finn Podium Layout 4.6.6 Finn Podium Layout 4.6.7 Finn Podium Layout 4.6.8 Finn Podium Layout 4.6.9 Finn Podium Layout 4.6.10 Finn Podium Layout 4.6.11 Finn Podium Layout 4.6.12 Finn Podium Layout 4.6.13 Finn Podium Layout 4.6.14 Finn Podium Layout 4.6.15 Finn Podium Layout 4.6.16 Finn Podium Layout 4.6.17 Finn Podium Layout 4.6.18 Finn Podium Layout 4.6.19 Finn Podium Layout 4.6.20 Finn Podium Layout 4.6.21 Finn Podium Layout 4.6.22 Finn Podium Layout 4.6.23 Finn Podium Layout 4.6.24 Finn Podium Layout 4.6.25 Finn Podium Layout 4.6.26 Finn Podium Layout 4.6.27 Finn Podium Layout 4.6.28 Finn Podium Layout 4.6.29 Finn Podium Layout 4.6.30 Finn Podium Layout 4.6.31 Finn Podium Layout 4.6.32 Finn Podium Layout 4.6.33 Finn Podium Layout 4.6.34 Finn Podium Layout 4.6.35 Finn Podium Layout 4.6.36 Finn Podium Layout 4.6.37 Finn Podium Layout 4.6.38 Finn Podium Layout 4.6.39 Finn Podium Layout 4.6.40 Finn Podium Layout 4.6.41 Finn Podium Layout 4.6.42 Finn Podium Layout 4.6.43 Finn Podium Layout 4.6.44 Finn Podium Layout 4.6.45 Finn Podium Layout 4.6.46 Finn Podium Layout 4.6.47 Finn Podium Layout 4.6.48 Finn Podium Layout 4.6.49 Finn Podium Layout 4.6.50 Finn Podium Layout 4.6.51 Finn Podium Layout 4.6.52 Finn Podium Layout 4.6.53 Finn Podium Layout 4.6.54 Finn Podium Layout 4.6.55 Finn Podium Layout 4.6.56 Finn Podium Layout 4.6.57 Finn Podium Layout 4.6.58 Finn Podium Layout 4.6.59 Finn Podium Layout 4.6.60 Finn Podium Layout 4.6.61 Finn Podium Layout 4.6.62 Finn Podium Layout 4.6.63 Finn Podium Layout 4.6.64 Finn Podium Layout 4.6.65 Finn Podium Layout 4.6.66 Finn Podium Layout 4.6.67 Finn Podium Layout 4.6.68 Finn Podium Layout 4.6.69 Finn Podium Layout 4.6.70 Finn Podium Layout 4.6.71 Finn Podium Layout 4.6.72 Finn Podium Layout 4.6.73 Finn Podium Layout 4.6.74 Finn Podium Layout 4.6.75 Finn Podium Layout 4.6.76 Finn Podium Layout 4.6.77 Finn Podium Layout 4.6.78 Finn Podium Layout 4.6.79 Finn Podium Layout 4.6.80 Finn Podium Layout 4.6.81 Finn Podium Layout 4.6.82 Finn Podium Layout 4.6.83 Finn Podium Layout 4.6.84 Finn Podium Layout 4.6.85 Finn Podium Layout 4.6.86 Finn Podium Layout 4.6.87 Finn Podium Layout 4.6.88 Finn Podium Layout 4.6.89 Finn Podium Layout 4.6.90 Finn Podium Layout 4.6.91 Finn Podium Layout 4.6.92 Finn Podium Layout 4.6.93 Finn Podium Layout 4.6.94 Finn Podium Layout 4.6.95 Finn Podium Layout 4.6.96 Finn Podium Layout 4.6.97 Finn Podium Layout 4.6.98 Finn Podium Layout 4.6.99 Finn Podium Layout 4.6.100 Finn Podium Layout 4.6.101 Finn Podium Layout 4.6.102 Finn Podium Layout 4.6.103 Finn Podium Layout 4.6.104 Finn Podium Layout 4.6.105 Finn Podium Layout 4.6.106 Finn Podium Layout 4.6.107 Finn Podium Layout 4.6.108 Finn Podium Layout 4.6.109	348

Summary

Vulnerable Configurations

References