Multer vulnerable to Denial of Service via unhandled exception from malformed request
概要
Multer vulnerable to Denial of Service via unhandled exception from malformed request
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.2 to receive a patch. No known workarounds are available.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory cna.openjsf.org
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com