CVE-2017-16116
CVE-2017-16116
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
07 Jun 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The string module is a module that provides extra string operations. The string module is vulnerable to regular expression denial of service when specifically crafted untrusted user input is passed into the underscore or unescapeHTML methods.
Affected products
HackerOne · string node moduleWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →