CVE-2022-24434

7.5

HIGHCVSS v3

Published

May 20, 2022

CVSS v2

5 MEDIUM

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes.

mscdex/busboy

GitHubA streaming parser for HTML form data for node.js

NVD

dicer

NPMA very fast streaming multipart parser for node.js

all versions, <= 0.3.1OSV

mscdex/dicer

GitHub

More on this CVE

NVD↗GitHub Advisory↗

A very fast streaming multipart parser for node.js

all versions, <= 0.3.1NVD

@idio/dicer

NPM[fork] A Very Fast Streaming Multipart Parser For Node.JS Written In ES6 And Optimised With JavaScript Compiler.

all versions, <= 0.3.1NVD

@types/dicer

NPMTypeScript definitions for dicer

all versions, <= 0.3.1NVD

idiocc/dicer

GitHub[fork] A Very Fast Streaming Multipart Parser For Node.JS Written In ES6 And Optimised With JavaScript Compiler.

all versions, <= 0.3.1NVD

Security Advisories

CVE-2022-24434

Description

More on this CVE