Vulnerabilities > CVE-2022-25940 - Unspecified vulnerability in Lite-Server Project Lite-Server
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
All versions of package lite-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |