high7.5
CVE-2017-16086
ua-parser is a port of Browserscope's user agent parser.
Impact
ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ua-Parser Project | Ua-Parser | All versions |