Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.
References
Link | Resource |
---|---|
https://github.com/xCss/Valine/issues/366 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2021-06-16 08:15
Updated : 2022-05-03 09:04
NVD link : CVE-2021-34801
Mitre link : CVE-2021-34801
JSON object : View
CWE
Products Affected
valine.js
- valine