CVE-2018-3739CWE-400

CVE-2018-3739: vulnerability in HackerOne https-proxy-agent node module

Published · Updated

Follow this CVE+ Monitor https-proxy-agent node module+ Monitor https-proxy-agent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setups where an attacker could submit typed input to the 'auth' parameter (e.g. JSON).
Affected products
HackerOne · https-proxy-agent node module