CVE-2017-10910

MEDIUM 6.5EPSS 2.2%

MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.

CVSS v3.0: 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v3.0: 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0: 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
EPSS: 2.21% chance of exploitation in the next 30 days, 81th percentile
Published: 2017-12-27
Updated: 2024-08-05

Proof-of-concept exploits (2)

advisories/GHSA-h9mj-fghc-664w
ossf-cve-benchmark/CVE-2017-109100★ · 2020-11-30

References

Related