CVE-2016-10524 Denial of Service and Content Injection in i18n-node-angular
HighCVSS 8.2
EPSS 0.78%
- Published
- Updated
- Exploit status
- No public exploit known
Description
i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not disabled in production environments a malicious user could fill up the server causing a Denial of Service or content injection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm i18n-node-angular(npm) | < 1.4.0 | 1.4.0 |
| i18n-node-angular project i18n-node-angular | < 1.4.0 | 1.4.0 |
| HackerOne i18n-node-angular node module | = <1.4.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- github.com patch third-party-advisory
- github.com
- www.npmjs.com
- nodesecurity.io broken-link third-party-advisory