Denial of service in Valine

中危 5.3CVE-2021-34801 · GHSA-p2c4-gxp4-j3xp · Published 16/06/2021 · updated 17/06/2026

要点

CVE-2021-34801 是影响 valine (valine.js), valine 的中危 (CVSS 5.3)漏洞。
未来 30 天内被利用的概率（EPSS）：1.7%，高于 77.5% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
valine valine.js	`= 1.4.14`	No fix yet
valine npm	`≤ 1.4.14`	No fix yet

Description

Valine is a fast, simple & powerful comment system. Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.

NVD description

Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.

References

nvd.nist.gov/vuln/detail/CVE-2021-34801 · ADVISORY
xCss/Valine · WEB
xCss/Valine · PACKAGE

valine 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

valine

valine.js

= 1.4.14

No fix yet

valine

npm

≤ 1.4.14

No fix yet

Description

NVD description

Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.

valine 的其他漏洞

查看全部 →