Medium severity · published Jul 14, 2022
CVE-2022-32210
`Undici.ProxyAgent` never verifies the remote server's certificate, and always exposes all request & response data to the proxy
6.5
CVSS
0.5%
EPSS
No
On KEV
Description
`Undici.ProxyAgent` never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpectedly means that proxies can MitM all HTTPS traffic, and if the proxy's URL is HTTP then it also means that nominally HTTPS requests are actually sent via plain-text HTTP between Undici and the proxy server.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UN
Undici · Nodejs
4.8.2 before 5.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-32210
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-32210
Exploit
https://github.com/nodejs/undici/security/advisories/GHSA-pgw7-wx7w-2w33
Exploit
https://hackerone.com/reports/1583680
More from Undici
9.8
CVE-2026-1525
undici is vulnerable to Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
9.8
CVE-2022-35949
undici is an HTTP/1.1 client, written from scratch for Node.js.`undici` is vulnerable to SSRF (Server-side Request Forgery) when an application takes in **user input** into the…
9.1
CVE-2026-109383
undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
9.1
CVE-2026-109829
undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
9.1
CVE-2026-84961
undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool