CVE-2017-20162

MediumCVSS 5.3/10Last modified Oct 15, 2026

Description

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is named caae2988ba2a37765d055c4eee63d383320ee662. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217451.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-1333

Affected software

No affected versions have been published.

Timeline

Published: Jan 5, 2023
Last modified: Oct 15, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-201639.8A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file s CVE-2017-201646.1A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin o CVE-2017-201657.5A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/CVE-2017-201669.8Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.CVE-2017-201676.1A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manip CVE-2017-201689.8A vulnerability was found in jfm-so piWallet. It has been rated as critical. Affected by this issue is some unknown functionality of the fil CVE-2017-201699.8A vulnerability, which was classified as critical, has been found in GGGGGGGG ToN-MasterServer. Affected by this issue is some unknown funct CVE-2017-201709.8A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of the file httpdocs/inde CVE-2017-201719.8A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the file db/sql/mysqlUtils CVE-2017-201729.8A vulnerability was found in ridhoq soundslike. It has been classified as critical. Affected is the function get_song_relations of the file CVE-2017-201739.8A vulnerability was found in AlexRed contentmap. It has been rated as critical. Affected by this issue is the function Load of the file cont CVE-2017-201749.8A vulnerability was found in bastianallgeier Kirby Webmentions Plugin and classified as problematic. Affected by this issue is some unknown