CVE-2015-8315

7.5HIGH

The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."

发布于: 1/23/2017更新于: 4/20/2025
在NVD查看在MITRE查看

描述

The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."

AI分析AI驱动

受影响产品

vercelms

参考资料