Description
Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.
Remediation
References
https://github.com/xCss/Valine/issues/366
Related Vulnerabilities
CVE-2021-27191 Vulnerability in npm package get-ip-range
CVE-2020-11996 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2023-33725 Vulnerability in maven package org.broadleafcommerce:broadleaf
CVE-2018-5673 Vulnerability in npm package dojo
CVE-2019-17495 Vulnerability in maven package io.springfox:springfox-swagger-ui