Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qwcr-r2fm-qrc7

Опубликовано: 10 сент. 2024
Источник: github
Github: Прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

body-parser vulnerable to denial of service when url encoding is enabled

Impact

body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service.

Patches

this issue is patched in 1.20.3

References

Пакеты

Наименование

body-parser

npm
Затронутые версииВерсия исправления

< 1.20.3

1.20.3

EPSS

Процентиль: 84%
0.02072
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-405

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 1 года назад

body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.

CVSS3: 7.5
redhat
больше 1 года назад

body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.

CVSS3: 7.5
nvd
больше 1 года назад

body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.

CVSS3: 7.5
msrc
больше 1 года назад

body-parser vulnerable to denial of service when url encoding is enabled

CVSS3: 7.5
debian
больше 1 года назад

body-parser is Node.js body parsing middleware. body-parser <1.20.3 is ...

EPSS

Процентиль: 84%
0.02072
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-405