CVEs-PoC/2017/CVE-2017-16023.md

CVE-2017-16023

Description

Decamelize is used to convert a dash/dot/underscore/space separated string to camelCase. Decamelize 1.1.0 through 1.1.1 uses regular expressions to evaluate a string and takes unescaped separator values, which can be used to create a denial of service attack.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/lycaleynes/NMAP-and-Wireshark
• https://github.com/lycaleynes/Nmap
• https://github.com/ossf-cve-benchmark/CVE-2017-16023