GitHub Advisoryadvisory · npm

GHSA-qr9h-vr5p-pwwx Denial of Service (DoS) in restify-paginate

HIGH Published 2021-04-12 Modified 2022-04-18 Official page ↗
Aliases
CVE-2020-27543
Ecosystem
npm
Packages
restify-paginate
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-755
Reviewed
2021-03-16

Affected packages

• npm restify-paginate: <= 0.0.5 (no fix yet)

Description

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception.

Related

Alias · CVE (1)

  • CVE-2020-27543 The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. vulnerability

Weakness · CWE (1)

  • CWE-755 Improper Handling of Exceptional Conditions weakness

References