CVE-2018-13863

The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial of Service (ReDoS) in lib/bson/decimal128.js. The flaw is triggered when the Decimal128.fromString() function is called to parse a long untrusted string.
References
Link Resource
https://snyk.io/vuln/npm:bson:20180225 Exploit Technical Description Third Party Advisory
https://github.com/mongodb/js-bson/commit/bd61c45157c53a1698ff23770160cf4783e9ea4a Patch Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:mongodb:js-bson:*:*:*:*:*:*:*:*

Information

Published : 2018-07-10 13:29

Updated : 2019-10-02 17:03


NVD link : CVE-2018-13863

Mitre link : CVE-2018-13863


JSON object : View

Advertisement

dedicated server usa

Products Affected

mongodb

  • js-bson