Severity
High
Analysis Summary
CVE-2024-25355
Node.js s3-url-parser module is vulnerable to a denial of service, caused by an error in the regexes component. By sending overly long input, a remote attacker could exploit this vulnerability to cause the application to crash.
Impact
- Denial of Service
Indicators of Compromise
CVE
- CVE-2024-25355
Affected Vendors
Node.js
Affected Products
- NPM s3-url-parser 1.0.3
Remediation
Upgrade to the latest version of s3-url-parser module, available from the Node.js GIT Repository.