CVE-2017-15010

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js

published October 3, 2017

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make an HTTP request using a specially crafted cookie may cause the application to consume an excessive amount of CPU.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03283 · 88.4th percentile
Published
2017-10-03T16:00Z
EPSS history
Timeline
  • 03 OCT 16:00Z
    A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js
    cvelistv5