CVE-2018-3711: High severity fastify fastify node.js vulnerability
Published Jun 7, 2018
·Updated
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.
Affected Software
1 affected component
fastify Fastify Node.js<0.38.0
Event History
Jun 7, 2018
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-3711?
CVE-2018-3711 is classified as a denial-of-service vulnerability.
2
How do I fix CVE-2018-3711?
To mitigate CVE-2018-3711, upgrade Fastify to version 0.38.0 or later.
3
What versions of Fastify are affected by CVE-2018-3711?
Fastify versions prior to 0.38.0 are affected by CVE-2018-3711.
4
What type of attack does CVE-2018-3711 facilitate?
CVE-2018-3711 facilitates a denial-of-service attack via large JSON payloads.
5
Is CVE-2018-3711 a client-side or server-side vulnerability?
CVE-2018-3711 is a server-side vulnerability affecting how Fastify handles incoming requests.