CVE-2016-10524

i18n-node-angular is a module used to interact between i18n and angular without using additional resources. A REST API endpoint that is used for development in i18n-node-angular before 1.4.0 was not disabled in production environments a malicious user could fill up the server causing a Denial of Service or content injection.

Score

CVSS 3.1 8.2 High

Status

Modified - support@hackerone.com

Published

2018-05-31

Last modified

2024-09-16

Weaknesses

CWE-400

Affected products

• I18n-node-angular Node Module (Hackerone)
• I18n-node-angular (I18n-node-angular Project)

References

• https://github.com/oliversalzburg/i18n-node-angular/commit/877720d2d9bb90dc8233706e81ffa03f99fc9dc8
• https://nodesecurity.io/advisories/80