Getting suspicious error on Nodejs web app

Question

I am getting the following error in my Nodejs running app:

URIError: Failed to decode param '/cgi-bin/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/.%%%%32%%65/bin/sh'

What could be the cause and how to solve it ?

I searched for this error on web but did not found any results on how to solve the problem

Someone is probing your app for vulnerabilities. That happens on the internet. There's no problem to solve here. — AKX, Feb 22 '23 at 10:43
This is part of life when you have a webserver connected to the internet, there are plenty of scanners active that are trying to find servers with known vulnerabilities. You can typically just ignore them. — robertklep, Feb 22 '23 at 10:43
Try to handle the error with a middleware: https://stackoverflow.com/a/36147121/11692562 — devpolo, Feb 22 '23 at 10:50
Thank you a lot @devpolo using your reference solved my problem — Keloo Kel, Feb 23 '23 at 06:37

Keloo Kel · Answer 1 · 2023-02-23T06:42:53.620

1

Thank you @devpolo , using the following lines of code, solved my problem:

app.use(function(req, res, next) {
var err = null;
try {
    decodeURIComponent(req.path)
}
catch(e) {
    err = e;
}
if (err){
    console.log(err, req.url);
    return res.redirect('/404');    
}
next(); });

edited Feb 23 '23 at 06:42

answered Feb 23 '23 at 06:39

Keloo Kel

11
2

Getting suspicious error on Nodejs web app

1 Answers1