Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-07928
HistoryJan 27, 2022 - 12:00 a.m.

Jsish RegExp_constructor denial of service vulnerability

2022-01-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

30.1%

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service (DoS) via the RegExp_constructor in src/jsiRegexp.c.

CPENameOperatorVersion
jsish jsisheq3.5.0

0.001 Low

EPSS

Percentile

30.1%

Related for CNVD-2022-07928