diff --git a/advisories/github-reviewed/2020/09/GHSA-6x33-pw7p-hmpq/GHSA-6x33-pw7p-hmpq.json b/advisories/github-reviewed/2020/09/GHSA-6x33-pw7p-hmpq/GHSA-6x33-pw7p-hmpq.json index 2f9b9412781..2ebf7d641ea 100644 --- a/advisories/github-reviewed/2020/09/GHSA-6x33-pw7p-hmpq/GHSA-6x33-pw7p-hmpq.json +++ b/advisories/github-reviewed/2020/09/GHSA-6x33-pw7p-hmpq/GHSA-6x33-pw7p-hmpq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6x33-pw7p-hmpq", - "modified": "2020-08-31T19:01:05Z", + "modified": "2024-01-29T20:57:00Z", "published": "2020-09-04T17:59:49Z", "aliases": [ @@ -9,7 +9,10 @@ "summary": "Denial of Service in http-proxy", "details": "Versions of `http-proxy` prior to 1.18.1 are vulnerable to Denial of Service. An HTTP request with a long body triggers an `ERR_HTTP_HEADERS_SENT` unhandled exception that crashes the proxy server. This is only possible when the proxy server sets headers in the proxy request using the `proxyReq.setHeader` function. \n\nFor a proxy server running on `http://localhost:3000`, the following curl request triggers the unhandled exception: \n```curl -XPOST http://localhost:3000 -d \"$(python -c 'print(\"x\"*1025)')\"```\n\n\n## Recommendation\n\nUpgrade to version 1.18.1 or later", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ { @@ -53,7 +56,8 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-184", + "CWE-693" ], "severity": "HIGH", "github_reviewed": true,