CVE-2023-49800

Summary

CVE-2023-49800 affects the open-source module `nuxt-api-party`, which is used to proxy API requests. The vulnerability lies in the `ofetch` library, where there is no filter on available options. Malicious users can construct a URL that does not fetch successfully and set a high number of retry attempts. This will result in a stack overflow due to recursive error handling in `ofetch`, leading to a denial of service. Users are advised to upgrade to version 0.22.1 to mitigate this issue. Alternatively, users unable to upgrade should limit `ofetch` options to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.