Vulnerabilities > CVE-2023-25166 - Unspecified vulnerability in Hapi Formula
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polynomial execution time and a denial of service. Users should upgrade to 3.0.1+. There are no known workarounds for this vulnerability.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |