OWASP NodeGoat Query Parameter research.js denial of service
CVE-2021-4247

4.3MEDIUM

Key Information:

Vendor

Owasp

Status
Nodegoat
Vendor
CVE Published:
18 December 2022

What is CVE-2021-4247?

A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routes/research.js of the component Query Parameter Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The name of the patch is 4a4d1db74c63fb4ff8d366551c3af006c25ead12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216184.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

NodeGoat

References

https://github.com/OWASP/NodeGoat/issues/225
https://github.com/OWASP/NodeGoat/commit/4a4d1db74c63fb4f...
https://vuldb.com/?id.216184

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.