CVE-2022-0235: Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch
A flaw was found in node-fetch. When following a redirect to a third-party domain, node-fetch was forwarding sensitive headers such as "Authorization," "WWW-Authenticate," and "Cookie" to potentially untrusted targets. This flaw leads to the exposure of sensitive information to an unauthorized actor.
Other sources
node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site.
node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Node.js node-fetch could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw when fetching a remote url with Cookie. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/rh-nodejs14-nodejsto a version that resolves this vulnerability.Fixed in 0:14.21.1-3.el7 - Upgrade
Upgrade
redhat/rh-nodejs14-nodejs-nodemonto a version that resolves this vulnerability.Fixed in 0:2.0.20-2.el7 - Upgrade
Upgrade
npm/node-fetchto a version that resolves this vulnerability.Fixed in 2.6.7 - Upgrade
Upgrade
npm/node-fetchto a version that resolves this vulnerability.Fixed in 3.1.1 - Upgrade
Upgrade
redhat/node-fetchto a version that resolves this vulnerability.Fixed in 2.6.7 - Upgrade
Upgrade
redhat/node-fetchto a version that resolves this vulnerability.Fixed in 3.1.1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-0235?
The severity of CVE-2022-0235 is high (8.8).
What is the affected software for CVE-2022-0235?
The affected software for CVE-2022-0235 is node-fetch.
What is the remedy for CVE-2022-0235?
The remedy for CVE-2022-0235 is to update node-fetch to version 2.6.7 or 3.1.1.
Where can I find more information about CVE-2022-0235?
More information about CVE-2022-0235 can be found in the NVD vulnerability report, GitHub commit, and Huntr bounty links.
What sensitive information is exposed by CVE-2022-0235?
CVE-2022-0235 exposes sensitive headers such as "Authorization," "WWW-Authenticate," and "Cookie" to potentially untrusted targets.