GHSA-9pq7-rcxv-47vq

ghsaUSosv

Incorrect Regular Expression in RestSharp

view advisory published 2021-07-14Licence: CC-BY-4.0

RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-27293US	high7.5	1.51% (74th)	—	2021-07-12
RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server re…

references

External citations — patches, advisories, analysis.

https://github.com/restsharp/RestSharp/commit/be39346784b68048b230790d15333574341143bcWEB
https://github.com/restsharp/RestSharp/issues/1556WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-27293ADVISORY
https://restsharp.devWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan