CVE-2024-30261

Summary

CVE-2024-30261 is a vulnerability affecting Undici, an HTTP/1.1 client for Node.js. This issue allows an attacker to manipulate the `integrity` option in `fetch()` function, enabling them to bypass integrity checks and accept tampered requests as valid. This security flaw was resolved in the patches released for versions 5.28.4 and 6.11.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.