Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40668
HistoryMay 24, 2023 - 8:33 a.m.

Denial Of Service (DoS)

2023-05-2408:33:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
hermes-engine
denial of service
null pointer.

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

47.0%

hermes-engine is vulnerable to Denial of Service (DoS) attacks. A malicious user is able to cause a null pointer dereference when the EnableHermesInternal config option was set to true, causing the application to crash.

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

47.0%

Related for VERACODE:40668