Denial Of Service (DoS)

🗓️ 11 Sep 2024 07:31:07Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

body-parser is vulnerable to Denial Of Service due to inadequate url encoding handling.

Reporter	Title	Published	Views	Family All 115
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Cloud Pak foundational services are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF001	28 Feb 202509:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (February 2025)	15 Apr 202503:52	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	17 Mar 202513:46	–	ibm
IBM Security Bulletins	Security Bulletin: PVR0546850 - Express - CVE-2024-45590 (Publicly disclosed vulnerability)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	27 Feb 202513:56	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	20 Nov 202415:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	18 Nov 202415:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in body-parser-1.20.0.tgz	7 Jul 202518:11	–	ibm

Vulners

Node

node-body-parser node-body-parserMatch1.19.0-4debian

AND

node-body-parser node-body-parserMatch1.19.0-2debian

AND

debian debian_linuxMatch999

openjsf body-parserRange1.4.0–1.20.2js

openjsf body-parserRange1.4.3–1.20.0js

Source	Link
github	www.github.com/expressjs/body-parser/commit/b2695c4450f06ba3b0ccf48d872a229bb41c9bce
github	www.github.com/advisories/GHSA-qwcr-r2fm-qrc7
github	www.github.com/expressjs/body-parser/security/advisories/GHSA-qwcr-r2fm-qrc7

17 Dec 2024 12:15Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.01387

SSVC