CVE-2016-10703 Denial of Service in ecstatic
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm ecstatic(npm) | < 2.0.0 | 2.0.0 |
| ecstatic project ecstatic | < 2.0.0 | 2.0.0 |
References
- nvd.nist.gov third-party-advisory
- github.com issue-tracking patch
- github.com
- www.checkmarx.com exploit patch third-party-advisory
- www.npmjs.com
- advisory.checkmarx.net