CyberRota Analysis
AI-GeneratedThe vulnerability in CSSOM versions up to 0.5.0 allows attackers to exploit the CSSStyleDeclaration.setProperty() method by using reserved property names, specifically "length," leading to excessive memory allocation and potential denial of service through process termination. Organizations utilizing affected versions of CSSOM should prioritize patching this vulnerability to mitigate the risk of service disruption. This issue is particularly critical for developers and system administrators managing web applications that rely on CSSOM for styling.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() that fails to validate reserved property names. Attackers can supply a stylesheet with a declaration named length to replace the internal counter and trigger excessive memory allocation during cssText serialization, causing process termination.