Vulnerabilities > CVE-2019-10742 - Improper Handling of Exceptional Conditions vulnerability in Axios

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

axios

CWE-755

NVD

Published: 2019-05-07

Updated: 2021-07-21

Summary

Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.

Vulnerable Configurations

Part	Description	Count
Application	Axios Axios Axios 0.1.0 Axios Axios 0.2.0 Axios Axios 0.2.1 Axios Axios 0.2.2 Axios Axios 0.3.0 Axios Axios 0.3.1 Axios Axios 0.4.0 Axios Axios 0.4.1 Axios Axios 0.4.2 Axios Axios 0.5.0 Axios Axios 0.5.1 Axios Axios 0.5.2 Axios Axios 0.5.3 Axios Axios 0.5.4 Axios Axios 0.6.0 Axios Axios 0.7.0 Axios Axios 0.8.0 Axios Axios 0.8.1 Axios Axios 0.9.0 Axios Axios 0.9.1 Axios Axios 0.10.0 Axios Axios 0.11.0 Axios Axios 0.11.1 Axios Axios 0.12.0 Axios Axios 0.13.0 Axios Axios 0.13.1 Axios Axios 0.14.0 Axios Axios 0.15.0 Axios Axios 0.15.1 Axios Axios 0.15.2 Axios Axios 0.15.3 Axios Axios 0.16.0 Axios Axios 0.16.1 Axios Axios 0.16.2 Axios Axios 0.17.0 Axios Axios 0.17.1 Axios Axios 0.18.0	37

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References