CVE-2016-10524GHSA-97GV-3P2C-XW7J
i18n-node-angular is a module used to interact between i18n and angular without using additional resources.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 1.4.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not disabled in production environments a malicious user could fill up the server causing a Denial of Service or content injection.
Timeline
- CVE published
- Record last updated
Affected versions
- HackerOne i18n-node-angular node module
fixed in 1.4.0
- i18n-node-angularnpm
fixed in 1.4.0