Количество 2
Количество 2
CVE-2023-34188
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously reparses that payload, and does not respond to any other requests.
GHSA-pcw9-xw4x-jgj3
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2023-34188 The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously reparses that payload, and does not respond to any other requests. | CVSS3: 7.5 | 0% Низкий | больше 2 лет назад | |
GHSA-pcw9-xw4x-jgj3 The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. | CVSS3: 7.5 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу