QwikSec

Security Database

CVE

CWE

Training

CVE-2017-16023

Published: Jun 4, 2018

Modified: Sep 17, 2024

PUBLISHED

Description

Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.

Vendor	Product	Versions
HackerOne	decamelize node module	affected `>=1.1.0 <=1.1.1`

Weaknesses (CWE)

References

https://github.com/sindresorhus/decamelize/issues/5

x_refsource_MISC

https://nodesecurity.io/advisories/308

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.