Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2017-10910

MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.

VectorNETWORK

PublishedDec 28, 2017, 02:29

Published Byvultures@jpcert.or.jp

Base Score

Score6.5

Package (Ecosystem)IntroducedFixedLimit

mqtt(npm)2.0.02.15.0N/A

CWE-674

Base Score

6.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.0

Attack Vector (AV)

NETWORK