CVE-2017-16030

2018-04-2600:00:00

CWE-400

hackerone

www.cve.org

0.001 Low

EPSS

Percentile

47.1%

JSON

Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2.1.12 and earlier.

CNA Affected

[
  {
    "product": "useragent node module",
    "vendor": "HackerOne",
    "versions": [
      {
        "status": "affected",
        "version": "<=2.1.12"
      }
    ]
  }
]

References

nodesecurity.io/advisories/312

0.001 Low

EPSS

Percentile

47.1%

JSON

Related for CVELIST:CVE-2017-16030