CVE-2023-26104CWE-400

All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters…

High · published February 25, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P
CVSS v4.0
Not supplied
EPSS
0.01172 · 67.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-02-25T05:00Z
EPSS history
Timeline
  • 25 FEB 05:00Z
    All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters…
    cvelistv5