← Back

CVE-2025-32997

nvd nist
Published: Apr 15, 2025Modified: Oct 21, 2025

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed.

Affected (2)

Chimurai
1 product
Http Proxy Middleware
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Chimurai
Http Proxy Middleware
Before 2.0.9
Http Proxy Middleware
From 3.0.0 to 3.0.5

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (4)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
Issue Tracking
Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Release Notes

Timeline

No history available yet.