CVE-2023-2968 — Undefined variable usage in npm package "proxy" leads to remote denial of service

CVE-2023-2968

Undefined variable usage in npm package "proxy" leads to remote denial of service PUBLISHED

Description (CNA)

A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 0 before 2.1.1

CWE

CWE-232

References

https://research.jfrog.com/vulnerabilities/undefined-variable-usage-in-proxy-leads-to-remote-denial-of-service-xray-520917

ADP enrichment

CVE

No English description supplied.

https://research.jfrog.com/vulnerabilities/undefined-variable-usage-in-proxy-leads-to-remote-denial-of-service-xray-520917

CISA-ADP

No English description supplied.

No references supplied.