CyberRota Analysis
AI-GeneratedThe vulnerability affects the Nuxt framework versions 3.1.0 to 3.21.10 and 4.5.1, allowing unauthenticated attackers to exploit the `/__nuxt_island/_.json` endpoint by sending large JSON payloads. This leads to excessive CPU usage on the Nitro single event loop, causing delays in processing legitimate concurrent requests. Organizations using affected versions of Nuxt should prioritize patching to mitigate potential denial-of-service impacts.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint `/__nuxt_island/...` decodes and hashes attacker-controlled JSON body input with destr and ohash before validating the URL-resident hash. An unauthenticated `POST /__nuxt_island/_.json` with a large JSON body is fully read, parsed, hashed, and then rejected, which wastes CPU on Nitro single event loop and delays concurrent requests. No valid hash and no authentication are required. This issue is fixed in 3.21.10 and 4.5.1.