Lucene search
+L
ExpressjsMethod-override

1 matches found

CVE
CVE
added 2018/06/07 2:0 a.m.90 views

CVE-2017-16136

CVE-2017-16136 affects the Node.js module method-override used with the Express.js framework. The issue is a regular expression denial of service (ReDoS) triggered when untrusted input is parsed via the X-HTTP-Method-Override header. In the provided documents, exploitation details are not describ...

7.5CVSS7.3AI score0.01215EPSS
Save