CVE-2022-24434

Denial of Service (DoS)

High · published May 20, 2022

CVSS v3.1
7.5
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.03478 · 89.0th percentile
Published
2022-05-20T20:05Z
EPSS history
Timeline
  • 20 MAY 20:05Z
    Denial of Service (DoS)
    cvelistv5