westonphillips / CheckmarxOnePOV

This repo will be used for Checkmarx ONE POV
MIT License
0 stars 0 forks source link

CVE-2019-10775 @ Npm-ecstatic-3.3.2 #120

Open westonphillips opened 1 year ago

westonphillips commented 1 year ago

Vulnerable Package issue exists @ Npm-ecstatic-3.3.2 in branch main

ecstatic before 4.1.4 have a denial of service vulnerability. Successful exploitation could lead to crash of an application.

Namespace: westonphillips Repository: CheckmarxOnePOV Repository Url: https://github.com/westonphillips/CheckmarxOnePOV CxAST-Project: westonphillips/CheckmarxOnePOV CxAST platform scan: 6a8170d0-38fa-4efc-81df-42628474102c Branch: main Application: CheckmarxOnePOV Severity: HIGH State: NOT_IGNORED Status: RECURRENT CWE: CWE-400


Additional Info Attack vector: NETWORK Attack complexity: LOW Confidentiality impact: NONE Availability impact: HIGH Remediation Upgrade Recommendation: 4.1.4


References Advisory Commit Pull request