Yüksek CVSS 8.2
CVE-2026-59731: CVE-2026-59731: güvenlik açığı
Açıklama (NVD)
Astro is a web framework for content-driven websites. Version 6.4.7 performs authorization decisions on a partially decoded pathname after reaching the iterative URL decoder limit, while later rewrite route matching performs an additional decodeURI() operation and can resolve the request to a protected route. This issue is fixed in version 6.4.8.
Özet bilgiler
- CVSS v3.1
- 8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N - EPSS
- %0,33 (yüzdelik 26)
- CWE
- CWE-647
- Yama
- Yok / bilinmiyor