Miggo Logo
Miggo Vulnerability Database
→
CVE-2017-16021

CVE-2017-16021: Regular Expression Denial Of Service in uri-js

6.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2017-16021
GHSA ID
GHSA-333w-rxj3-f55r
EPSS Score
0.44397%
CWE
CWE-400
Published
7/24/2018
Updated
4/22/2024
KEV Status
No
Technology
TechnologyJavaScript

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
uri-jsnpm< 3.0.03.0.0

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

*****t** v*rsions o* `uri-js` is sus**pti*l* to * r**ul*r *xpr*ssion **ni*l o* s*rvi** vuln*r**ility w**n us*r input is s*nt to t** `.p*rs*()` m*t*o*. ## R**omm*n**tion Up**t* to v*.*.* or l*t*r.

Reasoning

No *n*lysis *v*il**l*