Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ulises Gascon

#30268of 53,630
8.7Total CVSS
Vulnerabilities · 1
PT-2024-31693
8.7
2024-09-10
Unknown · Body-Parser · CVE-2024-45590
Name of the Vulnerable Software and Affected Versions: body-parser versions prior to 1.20.3 Description: The issue concerns a denial of service vulnerability when URL encoding is enabled. A malicious actor can use a specially crafted payload to flood the server with a large number of requests, resulting in denial of service. Recommendations: For versions prior to 1.20.3, update to version 1.20.3 to resolve the issue. As a temporary workaround, consider disabling URL encoding until a patch is available. Restrict access to the server to minimize the risk of exploitation.