Description

the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send a evil request to cause the web framework crash.

Remediation

References

https://github.com/ljharb/qs/issues/200

https://access.redhat.com/errata/RHSA-2017:2672

Related Vulnerabilities

CVE-2023-26127 Vulnerability in npm package n158

CVE-2022-41642 Vulnerability in npm package nadesiko3

CVE-2023-22894 Vulnerability in npm package @strapi/strapi

CVE-2023-49280 Vulnerability in maven package org.xwiki.contrib.changerequest:application-changerequest-default

CVE-2016-3092 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

Severity

High

Classification

CWE-20 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Third Party Advisory