Description (CNA)
Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / ecstatic node module | affected <1.4.0 |
CWE
CWE-400
References
- https://github.com/jfhbrook/node-ecstatic/pull/179
- https://bugs.chromium.org/p/v8/issues/detail?id=4640
- https://nodesecurity.io/advisories/64
ADP enrichment
No English description supplied.