CVE-2016-10703

Published: Dec 14, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.checkmarx.com/advisories/denial-of-service-dos-vulnerability-in-ecstatic-npm-package/

x_refsource_MISC

https://github.com/jfhbrook/node-ecstatic/commit/71ce93988ead4b561a8592168c72143907189f01

x_refsource_MISC

https://advisory.checkmarx.net/advisory/CX-2016-4450

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2016-10703

Description

Affected Products

References