CVE-2015-9242CWE-400
Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception
published May 29, 2018
What it is
Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.02061 · 81.2th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2018-05-29T20:00Z
EPSS history
Timeline