Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500 error back to the sender, hapi node module before 11.1.3 will continue to hold the socket open until timed out (default node timeout is 2 minutes).
CVSS Information
N/A
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
hapi node模块安全漏洞
Vulnerability Description
hapi node module是一款用于Node.js的服务器框架。该框架支持输入验证、缓存和身份验证等。 hapi node模块11.1.3之前版本中存在安全漏洞。攻击者借助传入到If-Modified-Since或Last-Modified包头的输入利用该漏洞造成拒绝服务（套接字耗尽）。
CVSS Information
N/A
Vulnerability Type
N/A