CVE-2024-52798
highpriority · track · 0EPSS 0.008 · 56 %ileDEEURUUSEPSS · scored 2026-10-22
path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.6–7.7
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (16)
Products and version ranges known to be affected.
- IBM Rational Business Developer 9.6all versionscert_bundDEcpe:/a:ibm:rational_business_developer:9.6
- IBM Rational Business Developer 9.7all versionscert_bundDEcpe:/a:ibm:rational_business_developer:9.7
advisories (5)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2025-0043IBM QRadar SIEM (Log Source Management App): Mehrere SchwachstellenDeutsch2025-01-12csaf · cert_bundDE
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.
- WID-SEC-W-2025-0264HCL BigFix Server Automation: Schwachstelle ermöglicht Denial of ServiceDeutsch2025-02-04csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in HCL BigFix Server Automation ausnutzen, um einen Denial of Service Angriff durchzuführen.
- WID-SEC-W-2025-0504HCL BigFix WebUI Applications: Mehrere SchwachstellenDeutsch2025-03-06csaf · cert_bundDE
Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um Cross-Site-Scripting-Angriffe zu starten, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.
- WID-SEC-W-2025-0580IBM License Metric Tool: Mehrere SchwachstellenDeutsch2025-03-17csaf · cert_bundDE
Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen im IBM License Metric Tool ausnutzen, um Daten (Protokolldateien) zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder SSRF-Angriffe durchzuführen.
- GHSA-rhx6-c78j-4q9wpath-to-regexp contains a ReDoS2024-12-05ghsa · osvUS
### Impact The regular expression that is vulnerable to backtracking can be generated in versions before 0.1.12 of `path-to-regexp`, originally reported in CVE-2024-45296 ### Patches Upgrade to 0.1.12. ### Workarounds Avoid using two parameters within a single path segment, when the separator is not `.` (e.g. no `/:a-:b`). Alternatively, you can define the regex used for both parameters and ensure they do not overlap to allow backtracking. ### References - https://github.com/advisories/GHSA-9wv6-86v2-598j - https://blakeembrey.com/posts/2024-09-web-redos/
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2024-52798cnnvd
- https://github.com/pillarjs/path-to-regexp/releases/tag/v0.1.12Patchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2024-52798cnnvd
- https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4enisa_euvd
- https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9wenisa_euvd
- https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4nvd
- https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9wnvd
- https://security.netapp.com/advisory/ntap-20250124-0002/nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan