CVE-2024-27088

CVSS 3.1 Score 0.0 of 10 (low)

Details

Published Feb 26, 2024
CWE ID 1333
CWE ID 400

Summary

CVE-2024-27088 affects the es5-ext library, which includes ECMAScript 5 extensions. This vulnerability arises when functions with unusually long names or complex default argument lists are passed to `function#copy` or `function#toStringTokens`. This can result in the script stalling due to excessive processing time. The issue has been resolved in version 0.10.63 of the library.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share