Intrusion PreventionNode.js.http-cache-semantics.cache-control.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Node.js http-cache-semantics package.
The vulnerability is due to improper handling of user-supplied data. The attacker can exploits this vulnerability via a maliciously crafted request header values. Successful exploitation may lead to a denial of service condition.
Affected Products
Node.js http-cache-semantics before version 4.1.1
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://github.com/kornelski/http-cache-semantics
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 53098 |
| Created | May 22, 2023 |
| Updated | Jun 09, 2023 |
| Risk |
|
| CVE ID | CVE-2022-25881 |
| Exploit Prediction Score | 0.19% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Other |