CVE-2017-16023
N/A
N/A
Summary
Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| HackerOne | decamelize node module | >=1.1.0 <=1.1.1 | affected |
Weaknesses
- CWE-400: Denial of Service (CWE-400)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.