Sunday, March 4, 2018

ReDoS Vulnerability in “AWS-Lambda-Multipart-Parser” Node Package

The Node package “aws-lambda-multipart-parser” was found to be vulnerable to a ReDoS (Regular-Expression Denial of Service) attack vector. This vulnerability enables a malicious user to cause each AWS Lambda function which uses it to stall until it times out. An attacker may send numerous ...

from Google Alert - vulnerability http://ift.tt/2FQWVNa
via IFTTT

No comments:

Post a Comment