CVE-2016-4055

6.5

MEDIUMCVSS v3

Published

January 23, 2017

CVSS v2

7.8 HIGH

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."

moment

NPMParse, validate, manipulate, and display dates

< 2.11.2NVD

@types/moment

NPMStub TypeScript definitions entry for Moment, which provides its own types definitions

< 2.11.2NVD

moment/moment

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Parse, validate, manipulate, and display dates in javascript.

< 2.11.2NVD

Security Advisories

CVE-2016-4055

Description

More on this CVE