Yüksek CVSS 7.5
CVE-2017-16119: Fresh: denetimsiz kaynak tüketimi
Açıklama (NVD)
Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.
Özet bilgiler
- Ürün
- Fresh Project Fresh
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %1,57 (yüzdelik 76)
- CWE
- CWE-400
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fresh-project-fresh | — | — | 0.5.2 |