💣Exploit CVE-2024-52798 - path-to-regexp turns path strings into a regular e

[Maksim]

CVE ID : CVE-2024-52798
Published : Dec. 5, 2024, 11:15 p.m. | 1 hour, 31 minutes ago
Description : path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.