Lucene search

GoogleOSV:CVE-2021-4247

HistoryDec 18, 2022 - 8:15 a.m.

CVE-2021-4247

2022-12-1808:15:09

Google

osv.dev

owasp nodegoat

vulnerability

denial of service

query parameter handler

remote attack

patch

vdb-216184

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.1%

JSON

A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routes/research.js of the component Query Parameter Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The name of the patch is 4a4d1db74c63fb4ff8d366551c3af006c25ead12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216184.

CPENameOperatorVersion
nodegoateq1.3
nodegoateq1.4
nodegoateq1.0.1
nodegoateq1.1
nodegoateq1.2
nodegoateq1.0.0

Name	Operator	Version
nodegoat	eq	1.3
nodegoat	eq	1.4
nodegoat	eq	1.0.1
nodegoat	eq	1.1
nodegoat	eq	1.2
nodegoat	eq	1.0.0

References

github.com/OWASP/NodeGoat/commit/4a4d1db74c63fb4ff8d366551c3af006c25ead12

github.com/OWASP/NodeGoat/issues/225

vuldb.com/?id.216184

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.1%

JSON

Related for OSV:CVE-2021-4247