Security Advisory

CVE-2014-7191

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-10-19 01:00:00

Last updated 2024-08-06 12:40:19

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The qs module before 1.0.0 in Node.js does not call the compact function for array data, which allows remote attackers to cause a denial of service (memory consumption) by using a large index value to create a sparse array.

← Browse all CVEs View on cve.org ↗