westonphillips / CheckmarxOnePOV

This repo will be used for Checkmarx ONE POV
MIT License
0 stars 0 forks source link

CVE-2022-24434 @ Npm-dicer-0.2.5 #165

Open westonphillips opened 1 year ago

westonphillips commented 1 year ago

Vulnerable Package issue exists @ Npm-dicer-0.2.5 in branch main

A Denial Of Service vulnerability exists in dicer before 0.3.1. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes.

Namespace: westonphillips Repository: CheckmarxOnePOV Repository Url: https://github.com/westonphillips/CheckmarxOnePOV CxAST-Project: westonphillips/CheckmarxOnePOV CxAST platform scan: 6a8170d0-38fa-4efc-81df-42628474102c Branch: main Application: CheckmarxOnePOV Severity: HIGH State: NOT_IGNORED Status: RECURRENT CWE: CWE-248


Additional Info Attack vector: NETWORK Attack complexity: LOW Confidentiality impact: NONE Availability impact: HIGH Remediation Upgrade Recommendation: 0.3.1


References Advisory Commit