Lucene search
Veracode Vulnerability DatabaseVERACODE:38547HistoryDec 21, 2022 - 3:05 a.m.
Denial Of Service (DoS)
2022-12-2103:05:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
lite-server
vulnerability
denial of service
decodeuri
control characters
http request
0.001 Low
EPSS
Percentile
35.1%
lite-server is vulnerable to denial of service. The vulnerability is due to the decodeURI() function which is unable to parse control characters allowing an attacker to cause an application crash via malicious HTTP request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| lite-server | le | 2.6.1 | |
| lite-server | le | 2.2.0 | |
| lite-server | le | 2.6.1 | |
| lite-server | le | 2.2.0 |
Related
nvd
nvd
CVE-2022-25940
2022-12-20 05:15:11
osv
osv
lite-server vulnerable to Denial of Service
2022-12-20 06:30:36
github
github
lite-server vulnerable to Denial of Service
2022-12-20 06:30:36
cve
cve
CVE-2022-25940
2022-12-20 05:15:11
cvelist
cvelist
CVE-2022-25940 Denial of Service (DoS)
2022-12-20 00:00:00
prion
prion
Design/Logic Flaw
2022-12-20 05:15:00