Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-2968

Undefined variable usage in npm package "proxy" leads to remote denial of service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

proxy

  • 0 to < 2.1.1affected

References