Information Disclosure

2022-06-1607:52:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

finastra/nestjs-proxy

information disclosure

vulnerability

proxyservice

authorization header

unauthorized user

sensitive information

EPSS

0.001

Percentile

48.7%

JSON

@finastra/nestjs-proxy is vulnerable to information disclosure. The vulnerability exists in the ProxyService function due to a lack of sanitization in the authorization header which allows an unauthorized user to access sensitive information in the system.