Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability appears to have been fixed in 2.3.0.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NodeJS Tough-Cookie 安全漏洞
Vulnerability Description
NodeJS Tough-Cookie是一款用于Node.js的RFC6265（HTTP状态管理协议）Cookies。 NodeJS Tough-Cookie 2.2.2版本中HTTP请求Cookie Header的解析过程存在安全漏洞。攻击者可借助Custom HTTP包头利用该漏洞造成拒绝服务（CPU资源耗尽）
CVSS Information
N/A
Vulnerability Type
N/A