CVE-2017-16136CWE-400
method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it
published June 7, 2018
What it is
method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed via the X-HTTP-Method-Override header.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01196 · 67.7th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2018-06-07T02:00Z
EPSS history
Timeline