Vulnerability · Published Dec 8, 2023 · Assigned by GitHub_M
CVE-2023-49800Denial of service by abusing `fetchOptions.retry` in nuxt-api-party
High 7.5
In plain English
A high-severity uncontrolled resource consumption in nuxt-api-party from johannschopplich. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
`nuxt-api-party` is an open source module to proxy API requests. The library allows the user to send many options directly to `ofetch`. There is no filter on which options are available. We can abuse the retry logic to cause the server to crash from a stack overflow. fetchOptions are obtained directly from the request body. A malicious user can construct a URL known to not fetch successfully, then set the retry attempts to a high value, this will cause a stack overflow as ofetch error handling works recursively resulting in a denial of service. This issue has been addressed in version 0.22.1. Users are advised to upgrade. Users unable to upgrade should limit ofetch options.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | nuxt-api-party | 0.22.1 | GHSA-q6hx-3m4p-749h |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| johannschopplich | nuxt-api-party | < 0.22.1 |
Weakness: CWE-674, CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H