Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-45590


body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3.


Published

2024-09-10T16:15:21.083

Last Modified

2024-09-20T16:26:44.977

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-405
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application openjsf body-parser < 1.20.3 Yes

References