Vulnerabilities > CVE-2022-39288 - Improper Check for Unusual or Exceptional Conditions vulnerability in Fastify

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

fastify

CWE-754

NVD

Published: 2022-10-10

Updated: 2022-10-12

Summary

fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of service via malicious use of the Content-Type header. An attacker can send an invalid Content-Type header that can cause the application to crash. This issue has been addressed in commit `fbb07e8d` and will be included in release version 4.8.1. Users are advised to upgrade. Users unable to upgrade may manually filter out http content with malicious Content-Type headers.

Vulnerable Configurations

Part	Description	Count
Application	Fastify Fastify Fastify 0.1.0 Fastify Fastify 0.2.0 Fastify Fastify 0.3.0 Fastify Fastify 0.4.0 Fastify Fastify 0.5.0 Fastify Fastify 0.6.0 Fastify Fastify 0.7.0 Fastify Fastify 0.7.1 Fastify Fastify 0.8.0 Fastify Fastify 0.9.0 Fastify Fastify 0.10.0 Fastify Fastify 0.11.0 Fastify Fastify 0.11.1 Fastify Fastify 0.12.0 Fastify Fastify 0.13.0 Fastify Fastify 0.13.1 Fastify Fastify 0.14.0 Fastify Fastify 0.14.1 Fastify Fastify 0.15.0 Fastify Fastify 0.15.1 Fastify Fastify 0.15.2 Fastify Fastify 0.15.3 Fastify Fastify 0.16.0 Fastify Fastify 0.17.0 Fastify Fastify 0.18.0 Fastify Fastify 0.19.0 Fastify Fastify 0.19.1 Fastify Fastify 0.20.0 Fastify Fastify 0.20.1 Fastify Fastify 0.21.0 Fastify Fastify 0.22.0 Fastify Fastify 0.23.0 Fastify Fastify 0.24.0 Fastify Fastify 0.25.0 Fastify Fastify 0.25.1 Fastify Fastify 0.25.2 Fastify Fastify 0.25.3 Fastify Fastify 0.26.0 Fastify Fastify 0.26.1 Fastify Fastify 0.26.2 Fastify Fastify 0.27.0 Fastify Fastify 0.28.0 Fastify Fastify 0.28.1 Fastify Fastify 0.28.2 Fastify Fastify 0.29.0 Fastify Fastify 0.29.1 Fastify Fastify 0.29.2 Fastify Fastify 0.30.0 Fastify Fastify 0.30.1 Fastify Fastify 0.30.2 Fastify Fastify 0.30.3 Fastify Fastify 0.31.0 Fastify Fastify 0.32.0 Fastify Fastify 0.33.0 Fastify Fastify 0.34.0 Fastify Fastify 0.35.0 Fastify Fastify 0.35.1 Fastify Fastify 0.35.2 Fastify Fastify 0.35.3 Fastify Fastify 0.35.4 Fastify Fastify 0.35.5 Fastify Fastify 0.35.6 Fastify Fastify 0.35.7 Fastify Fastify 0.36.0 Fastify Fastify 0.37.0 Fastify Fastify 0.38.0 Fastify Fastify 0.39.0 Fastify Fastify 0.39.1 Fastify Fastify 0.40.0 Fastify Fastify 0.41.0 Fastify Fastify 0.42.0 Fastify Fastify 0.43.0 Fastify Fastify 1.0.0 Fastify Fastify 1.1.0 Fastify Fastify 1.1.1 Fastify Fastify 1.2.0 Fastify Fastify 1.2.1 Fastify Fastify 1.3.0 Fastify Fastify 1.3.1 Fastify Fastify 1.4.0 Fastify Fastify 1.5.0 Fastify Fastify 1.6.0 Fastify Fastify 1.7.0 Fastify Fastify 1.8.0 Fastify Fastify 1.9.0 Fastify Fastify 1.10.0 Fastify Fastify 1.11.0 Fastify Fastify 1.11.1 Fastify Fastify 1.11.2 Fastify Fastify 1.12.0 Fastify Fastify 1.12.1 Fastify Fastify 1.13.0 Fastify Fastify 1.13.1 Fastify Fastify 1.13.2 Fastify Fastify 1.13.3 Fastify Fastify 1.13.4 Fastify Fastify 1.14.0 Fastify Fastify 1.14.1 Fastify Fastify 1.14.2 Fastify Fastify 1.14.3 Fastify Fastify 1.14.4 Fastify Fastify 1.14.5 Fastify Fastify 1.14.6 Fastify Fastify 2..7.0 Fastify Fastify 2.0.0 Fastify Fastify 2.0.1 Fastify Fastify 2.1.0 Fastify Fastify 2.2.0 Fastify Fastify 2.3.0 Fastify Fastify 2.4.0 Fastify Fastify 2.4.1 Fastify Fastify 2.5.0 Fastify Fastify 2.6.0 Fastify Fastify 2.7.1 Fastify Fastify 2.8.0 Fastify Fastify 2.9.0 Fastify Fastify 2.10.0 Fastify Fastify 2.11.0 Fastify Fastify 2.12.0 Fastify Fastify 2.12.1 Fastify Fastify 2.13.0 Fastify Fastify 2.13.1 Fastify Fastify 2.14.0 Fastify Fastify 2.14.1 Fastify Fastify 2.15.0 Fastify Fastify 2.15.1 Fastify Fastify 2.15.2 Fastify Fastify 2.15.3 Fastify Fastify 3.0.0 Fastify Fastify 3.0.1 Fastify Fastify 3.0.2 Fastify Fastify 3.0.3 Fastify Fastify 3.1.0 Fastify Fastify 3.1.1 Fastify Fastify 3.2.0 Fastify Fastify 3.2.1 Fastify Fastify 3.3.0 Fastify Fastify 3.4.0 Fastify Fastify 3.4.1 Fastify Fastify 3.5.0 Fastify Fastify 3.5.1 Fastify Fastify 3.6.0 Fastify Fastify 3.7.0 Fastify Fastify 3.8.0 Fastify Fastify 3.9.0 Fastify Fastify 3.9.1 Fastify Fastify 3.9.2 Fastify Fastify 3.10.0 Fastify Fastify 3.10.1 Fastify Fastify 3.11.0 Fastify Fastify 3.12.0 Fastify Fastify 3.13.0 Fastify Fastify 3.14.0 Fastify Fastify 3.14.1 Fastify Fastify 3.14.2 Fastify Fastify 3.15.0 Fastify Fastify 3.15.1 Fastify Fastify 3.16.0 Fastify Fastify 3.16.1 Fastify Fastify 3.16.2 Fastify Fastify 3.17.0 Fastify Fastify 3.18.0 Fastify Fastify 3.18.1 Fastify Fastify 3.19.0 Fastify Fastify 3.19.1 Fastify Fastify 3.19.2 Fastify Fastify 3.20.0 Fastify Fastify 3.20.1 Fastify Fastify 3.20.2 Fastify Fastify 3.21.0 Fastify Fastify 3.21.1 Fastify Fastify 3.21.2 Fastify Fastify 3.21.3 Fastify Fastify 3.21.4 Fastify Fastify 3.21.5 Fastify Fastify 3.21.6 Fastify Fastify 3.22.0 Fastify Fastify 3.22.1 Fastify Fastify 3.23.0 Fastify Fastify 3.23.1 Fastify Fastify 3.24.0 Fastify Fastify 3.24.1 Fastify Fastify 3.25.0 Fastify Fastify 3.25.1 Fastify Fastify 3.25.2 Fastify Fastify 3.25.3 Fastify Fastify 3.26.0 Fastify Fastify 3.27.0 Fastify Fastify 3.27.1 Fastify Fastify 3.27.2 Fastify Fastify 3.27.3 Fastify Fastify 3.27.4 Fastify Fastify 3.28.0 Fastify Fastify 3.29.0 Fastify Fastify 3.29.1 Fastify Fastify 3.29.2 Fastify Fastify 3.29.3 Fastify Fastify 4.0.0 Fastify Fastify 4.0.1 Fastify Fastify 4.0.2 Fastify Fastify 4.0.3 Fastify Fastify 4.1.0 Fastify Fastify 4.2.0 Fastify Fastify 4.2.1 Fastify Fastify 4.3.0 Fastify Fastify 4.4.0 Fastify Fastify 4.5.0 Fastify Fastify 4.5.1 Fastify Fastify 4.5.2 Fastify Fastify 4.5.3 Fastify Fastify 4.6.0 Fastify Fastify 4.7.0 Fastify Fastify 4.8.0	227

Common Weakness Enumeration (CWE)

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References