Vulnerabilities > CVE-2015-8315 - Unspecified vulnerability in Vercel MS

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
vercel
NVD
Published: 2017-01-23
Updated: 2024-11-21

Summary

The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."

Vulnerable Configurations

Part Description Count
Application
Vercel
10

References