CVE-2021-4247

A vulnerability has been found in OWASP NodeGoat and classified as problematic. This vulnerability affects unknown code of the file app/routes/research.js of the component Query Parameter Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The name of the patch is 4a4d1db74c63fb4ff8d366551c3af006c25ead12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216184.

• CWE-404

• https://github.com/OWASP/NodeGoat/commit/4a4d1db74c63fb4ff8d366551c3af006c25ead12Patch, Third Party Advisory
• https://github.com/OWASP/NodeGoat/issues/225Exploit, Patch, Third Party Advisory
• https://vuldb.com/?id.216184Permissions Required, Third Party Advisory
• https://github.com/OWASP/NodeGoat/commit/4a4d1db74c63fb4ff8d366551c3af006c25ead12Patch, Third Party Advisory
• https://github.com/OWASP/NodeGoat/issues/225Exploit, Patch, Third Party Advisory
• https://vuldb.com/?id.216184Permissions Required, Third Party Advisory

Published

Dec 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4241A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2021-4242A vulnerability was found in Sapido BR270n, BRC76n, GR297 an…8.8
• CVE-2021-4243Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-4244A vulnerability classified as problematic has been found in …6.1
• CVE-2021-4245A vulnerability classified as problematic has been found in …9.8
• CVE-2021-4246A vulnerability was found in roxlukas LMeve and classified a…9.8
• CVE-2021-4248A vulnerability was found in kapetan dns up to 6.1.0. It has…9.8
• CVE-2021-4249A vulnerability was found in xml-conduit. It has been classi…7.5
• CVE-2021-4250A vulnerability classified as problematic has been found in …7.5
• CVE-2021-4251A vulnerability classified as problematic was found in as. T…6.1
• CVE-2021-4252A vulnerability, which was classified as problematic, has be…6.1
• CVE-2021-42521There is a NULL pointer dereference vulnerability in VTK bef…7.5