CVE-2017-16136 - AskarLabs CVE Database

CVE-2017-16136

Vendor Hackerone

Product method-override node module

Weakness CWE-400

Published June 7, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed via the X-HTTP-Method-Override header.

Key dates

02Disclosure timeline

June 7, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-16136 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2022-23580 Abort caused by allocating a vector that is too large in Tensorflow CVE-2020-3373 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability CVE-2021-0215 Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps CVE-2025-59502 Remote Procedure Call Denial of Service Vulnerability CVE-2026-34649 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)