Lucene search

K
osvGoogleOSV:GHSA-7VXC-Q7RV-QFJ8
HistoryAug 11, 2023 - 3:30 p.m.

SUCHMOKUO node-worker-threads-pool denial of service Vulnerability

2023-08-1115:30:46
Google
osv.dev
6
staticpool attackers software

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.0%

An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3 that allows attackers to cause a denial of service.

CPENameOperatorVersion
node-worker-threads-poolle1.4.3

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.0%

Related for OSV:GHSA-7VXC-Q7RV-QFJ8