cve/2017/CVE-2017-16119.md
2024-05-26 14:27:05 +02:00

878 B

CVE-2017-16119

Description

Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition.

POC

Reference

No PoCs from references.

Github