cve/2017/CVE-2017-16138.md

CVE-2017-16138

Description

The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/engn33r/awesome-redos-security
• https://github.com/harpojaeger/exquisite-corpse
• https://github.com/kiki722/poemz
• https://github.com/ossf-cve-benchmark/CVE-2017-16138