CVE-2017-20165
LOWdebug < 3.1.0 - Inefficient Regular Expression Complexity in useColors Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2017-20165. PoCs published by fastify.
AI-analyzed exploit summary This repository contains a proof-of-concept for CVE-2017-20165, which involves a directory traversal vulnerability in the `@fastify/send` library. The exploit allows attackers to access files outside the intended directory root by manipulating the request path.
Description
A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version 3.1.0 is able to address this issue. The identifier of the patch is c38a0166c266a679c8de012d4eaccec3f944e685. It is recommended to upgrade the affected component. The identifier VDB-217665 was assigned to this vulnerability.
Exploits (1)
This repository contains a proof-of-concept for CVE-2017-20165, which involves a directory traversal vulnerability in the `@fastify/send` library. The exploit allows attackers to access files outside the intended directory root by manipulating the request path.
References (5)
Scores
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L