CVE-2016-10524
 
Severity Score
8.2
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not disabled in production environments a malicious user could fill up the server causing a Denial of Service or content injection.
i18n-node-angular es un módulo empleado para interactuar entre i18n y angular sin emplear recursos adicionales. Un endpoint API REST que se emplea para desarrollo en i18n-node-angular en versiones anteriores a la 1.4.0 no se deshabilitó en entornos de producción, por lo que un usuario podría llenar el servidor y provocar una denegación de servicio (DoS) o una inyección de contenidos.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-10-29 CVE Reserved
- 2018-05-31 CVE Published
- 2024-03-05 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://nodesecurity.io/advisories/80 | Broken Link |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://github.com/oliversalzburg/i18n-node-angular/commit/877720d2d9bb90dc8233706e81ffa03f99fc9dc8 | 2022-04-06 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
I18n-node-angular Project Search vendor "I18n-node-angular Project" | I18n-node-angular Search vendor "I18n-node-angular Project" for product "I18n-node-angular" | < 1.4.0 Search vendor "I18n-node-angular Project" for product "I18n-node-angular" and version " < 1.4.0" | node.js |
Affected
|