NetSight
high7.5

CVE-2017-16099

The no-case module is vulnerable to regular expression denial of service.

Impact

The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.

Affected products

VendorProductAffected versions
No-Case ProjectNo-Case
before 2.3.2

Weakness classification

References