Regular Expression Denial of Service in jquery-validation
The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation. The project contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service) This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen).
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-21252US | high7.5 | — | ||
The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 con… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/jquery-validation/jquery-validationPACKAGE
- https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7dWEB
- https://github.com/jquery-validation/jquery-validation/pull/2371WEB
- https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwmWEB
- https://jqueryvalidation.org/#installation-via-package-managersWEB
- https://lists.debian.org/debian-lts-announce/2023/08/msg00040.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-21252ADVISORY
- https://security.netapp.com/advisory/ntap-20210219-0005WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan