cvelist/2016/10xxx/CVE-2016-10524.json

69 lines
2.1 KiB
JSON
Raw Normal View History

2017-10-29 14:04:06 -04:00
{
"CVE_data_meta" : {
"ASSIGNER" : "support@hackerone.com",
"DATE_PUBLIC" : "2018-04-26T00:00:00",
2017-10-29 14:04:06 -04:00
"ID" : "CVE-2016-10524",
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "i18n-node-angular node module",
"version" : {
"version_data" : [
{
"version_value" : "<1.4.0"
}
]
}
}
]
},
"vendor_name" : "HackerOne"
}
]
}
2017-10-29 14:04:06 -04:00
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
2018-05-31 16:03:59 -04:00
"value" : "i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not disabled in production environments a malicious user could fill up the server causing a Denial of Service or content injection."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Denial of Service (CWE-400)"
}
]
}
]
},
"references" : {
"reference_data" : [
{
2018-05-31 16:03:59 -04:00
"name" : "https://github.com/oliversalzburg/i18n-node-angular/commit/877720d2d9bb90dc8233706e81ffa03f99fc9dc8",
"refsource" : "MISC",
"url" : "https://github.com/oliversalzburg/i18n-node-angular/commit/877720d2d9bb90dc8233706e81ffa03f99fc9dc8"
},
{
2018-05-31 16:03:59 -04:00
"name" : "https://nodesecurity.io/advisories/80",
"refsource" : "MISC",
"url" : "https://nodesecurity.io/advisories/80"
2017-10-29 14:04:06 -04:00
}
]
}
}