CVE-2023-45143

Risk Scores

Affected Products

Exploit Intelligence

• Cookie headers are not cleared in cross-domain redirect in undici-fetch (hackerone)
• Cookie headers are not cleared in cross-domain redirect in undici-fetch (hackerone)
• Cookie headers are not cleared in cross-domain redirect in undici-fetch (hackerone)
• https://hackerone.com/reports/2166948 (osv)

Timeline

• CVE Published
• Oct 13, 2023 EPSS Score
• Oct 26, 2023 EPSS Score
• Dec 15, 2023 EPSS Score
• Jan 15, 2024 EPSS Score
• Jan 20, 2024 PoC Published
• Feb 16, 2024 EPSS Score
• Feb 17, 2024 EPSS Score
• Apr 18, 2024 EPSS Score
• May 20, 2024 EPSS Score
• Jun 20, 2024 EPSS Score
• Jul 21, 2024 EPSS Score

References

• ALAS2023-2023-412: nodejs (important) advisory