Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2019-10742

Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.

VectorNETWORK

PublishedMay 07, 2019, 19:29

Published Byreport@snyk.io

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

axios(npm)00.18.1N/A

References

https://app.snyk.io/vuln/SNYK-JS-AXIOS-174505
https://github.com/axios/axios/issues/1098
https://github.com/axios/axios/pull/1485

Weakness Type

CWE-755

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base SeverityHigh

Version

3.0

Attack Vector (AV)

NETWORK