CVE-2017-1000048

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-1000048
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000048.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000048
Aliases
Downstream
Published
2017-07-17T13:18:17.453Z
Modified
2026-04-10T03:55:59.019929Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

the web framework using ljharb's qs module older than v6.3.2, v6.2.3, v6.1.2, and v6.0.4 is vulnerable to a DoS. A malicious user can send a evil request to cause the web framework crash.

References

Affected packages

Git / github.com/ljharb/qs

Affected ranges

Type
GIT
Repo
https://github.com/ljharb/qs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a66f9c78309b5e441d4840bf68d1a008486ae0db
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dc3cfcc7ee4af9fd8f464b19c5587f8d1ef9d252
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7af068a898c8456a99613e474c8765dea7f41dc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
03848fed725e50bb06379e8f3ee40b3f92a1b60d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e1ff638989afe27a2c7f8ec7eecf9bab71a4fbf2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
96871b8ebe001a993454f8cbf79c2410dabd7eb9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a601ae18bc419399db7debc2765c96c84e83c237
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
58097c12559b4c5857af99927273b3141dff8529
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9250c4cda5102fcf72441445816e6d311fc6813d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
820be617369cadbb7b15701dacff3b4cc9a92b84
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bbaba1e380f634b96e62efaa1b88346111b53b3a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cdd64a9d1385dbc3dde48da6de98b5993f1607bd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
482674af2389db626f9ff67c7ae6a7b9ca7a4891
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d7a6dd83ef43560c095c6d0bb6087fb0309b0c54
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a846022c26b35206b3526efa62cf23c2cabfd0d9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
90ac66b2f90dc357134ea138be6cededa1578e5f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9e9759ec5be2dd99ce90961bbff47075cd5a8160
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a341cdf2fadba5ede1ce6c95c7051f6f31f37b81
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
872da25efd167985c153898a06277ef34ce97a63
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ed169696b6cebacf8e7f7c6b4ba8eeb5f2cb2694
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bbb6ae1bbf8adb3057a52363715a20a25bd8a68f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
47dfbd6740b3cc1593847825701c8aa136f636e3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
be1c4211a6031cac3443ce66220f4954338bde3f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5bd79545edb33d6a43398fec7df9ecef2da005ea
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b606162b92ac485d9a3e945f6653507d7ec1210
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d67d315b606c6bb809fedcbeebbbdb7f863852aa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
335f839142e6c2c69f5302c4940d92acb0e77561
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ff662eca3f00b1505d05dbaa7442a19c26f7ebe0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8aa9c26f90335b5483a4f456dea9acbada8a881c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
153ce84948845330d90178cbad982fc7371df538
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "6.3.1"
        }
    ]
}

Affected versions

v1.*
v1.0.0
v1.0.1
v1.0.2
v1.1.0
v1.2.0
v1.2.1
v1.2.2
v2.*
v2.0.0
v2.1.0
v2.2.0
v2.2.1
v2.2.2
v2.2.3
v2.2.4
v2.2.5
v2.3.0
v2.3.1
v2.3.2
v2.3.3
v2.4.0
v2.4.1
v2.4.2
v3.*
v3.0.0
v3.1.0
v4.*
v4.0.0
v5.*
v5.0.0
v5.1.0
v5.2.0
v5.2.1
v6.*
v6.0.0
v6.0.1
v6.0.2
v6.0.3
v6.1.0
v6.1.1
v6.2.0
v6.2.1
v6.2.2
v6.3.0
v6.3.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000048.json"