CVE-2025-32996 MEDIUM

CVE-2025-32996

Vendor Chimurai
Product http-proxy-middleware
Weakness CWE-670
Published April 15, 2025
Last update April 15, 2025
View on NVD All CVEs

CVSS base score

4.0/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

What the vulnerability does

01Description

In http-proxy-middleware before 2.0.8 and 3.x before 3.0.4, writeBody can be called twice because "else if" is not used.

Key dates

02Disclosure timeline

April 15, 2025 CVE published
April 15, 2025 Record updated