CVEs-PoC/2022/CVE-2022-24434.md

CVE-2022-24434

Description

This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes.

POC

Reference

• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2838865
• https://snyk.io/vuln/SNYK-JS-DICER-2311764

Github

• https://github.com/MayurManjrekar/DevSecOps-Demo
• https://github.com/nayankadamm/CVE-2022-24434_POC
• https://github.com/sebcoles/waf_rule_testing_example
• https://github.com/xfjcoder/E-Store