5003 matches found
DEBIAN-CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
axios is vulnerable to Inefficient Regular Expression Complexity...
UBUNTU-CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749 Inefficient Regular Expression Complexity in axios/axios
axios is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3749
CVE-2021-3749 affects the Axios package used by IBM Cloud Pak System and Node.js environments. It is a Denial of Service vulnerability via a regular-expression DoS in the trim function, exploitable by crafted input to cause high CPU usage. Remediation is to upgrade to fixed software; IBM Cloud Pa...
CVE-2021-3749
axios is vulnerable to Inefficient Regular Expression Complexity...
PT-2021-21692 Ā· Axios Ā· Axios
Name of the Vulnerable Software and Affected Versions: axios versions prior to 0.21.2 Description: The issue is related to Inefficient Regular Expression Complexity. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where...
Axios čµęŗē®”ēéčÆÆę¼ę“
Axios is an HTTP client based on Promise a solution for asynchronous programming. Axios has a security vulnerability that stems from a ReDoS Regular Expression Denial of Service flaw found in the axios package. An attacker could exploit the vulnerability to cause the application to consume...
Inefficient Regular Expression Complexity in axios/axios
āļø Description A ReDoS regular expression denial of service flaw was found in the axios package. An attacker that is able to provide crafted input to the trim function may cause an application to consume an excessive amount of CPU. Similar attack ref: https://nvd.nist.gov/vuln/detail/CVE-2020-7753...
The vulnerability of the Axios application software Aurora Center, which allows a perpetrator to carry out an SSRF attack
The vulnerability of the Axios application software Autora Center relates to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...
Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to a Server-Side Request Forgery vulnerability (CVE-2020-28168)
Summary If an App Connect flow calls a URL controlled by a malicious actor, and App Connect Enterprise is running in an environment with a proxy, the controller of the target URL can construct a response with a redirect that results in the proxy being bypassed Vulnerability Details CVEID:...
Server-Side Request Forgery
Overview The axios NPM package before 0.21.1 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address. Recommendation Upgrade to 0.21.1 or later. References - Github...
Axios vulnerable to Server-Side Request Forgery
Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...
GHSA-4W2V-Q235-VP99 Axios vulnerable to Server-Side Request Forgery
Axios NPM package 0.21.0 contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address...
-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +51439 more potentially affected by CVE-2020-28168 via axios (>=0.1.0, <=0.21.0)
axios NPM version =0.1.0, =1.0.1, =1.0.1, =1.0.0, =1.0.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 04-17 1.0.0 - 04-17zy 1.0.0 - 04-a 1.0.0 - 04-code 1.0.0 - 05-clima-mundo 1.0.0 - 0726react 0.1.1 - 0a 1.0.0 - 0c 1.0.0 and more Source cves: CVE-2020-28168 Source advisory: OSV:GHSA-4W2V-Q235-VP9...
Axios NPM package code issue vulnerability
Axios is an HTTP client based on Promise a solution for asynchronous programming. A security vulnerability exists in the Axios NPM package version 0.21.0, which can be exploited by an attacker to be able to bypass the proxy by providing a URL that responds to a restricted host or IP address via a...
CVE-2020-28168
A flaw was found in nodejs-axios. The Axios NPM package contains a Server-Side Request Forgery SSRF vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address. Mitigation A mitigation exists where by catching the...
Server-Side Request Forgery (SSRF)
axios is vulnerable to server-side request forgery SSRF. The vulnerability exists due to a lack of validation of the URL that is passed via the request from client, allowing the attacker to bypass a proxy and submit requests on behalf of the server by providing a URL that responds with a redirect...