CVE-2017-16111CWE-400

CVE-2017-16111: vulnerability in HackerOne content node module

Published · Updated

Follow this CVE+ Monitor content node module+ Monitor content

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%
The content module is a module to parse HTTP Content-* headers. It is used by the hapijs framework to provide this functionality. The module is vulnerable to regular expression denial of service when passed a specifically crafted Content-Type or Content-Disposition header.
Affected products
HackerOne · content node module