Skip to main content

Uncaught Exception

CVE-2022-24434

High
7.5/10

Summary

A Denial of Service vulnerability exists in all versions of the package dicer. A malicious attacker can send a modified form to the server, and crash the nodejs service. An attacker could also send the payload again and again so that the service continuously crashes.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-248 - Uncaught Exception

An exception is thrown from a function, but it is not caught.

References

Advisory Timeline

  • Published