Lucene search
HackeroneCVELIST:CVE-2017-16115HistoryJun 07, 2018 - 2:00 a.m.
CVE-2017-16115
2018-06-0702:00:00
CWE-400
hackerone
www.cve.org
5
EPSS
0.001
Percentile
43.0%
The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds.
CNA Affected
[
{
"product": "timespan node module",
"vendor": "HackerOne",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]Related
osv
osv
Regular Expression Denial of Service in timespan
2018-08-29 23:04:14
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2017-09-26 02:37:36
prion
prion
Design/Logic Flaw
2018-06-07 02:29:00
nvd
nvd
CVE-2017-16115
2018-06-07 02:29:02
nodejs
nodejs
Regular Expression Denial of Service
2017-09-21 20:44:30
github
github
Regular Expression Denial of Service in timespan
2018-08-29 23:04:14
cve
cve
CVE-2017-16115
2018-06-07 02:29:02