CVE-2021-3807

🗓️ 17 Sep 2021 00:00:00Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 952 Views

ansi-regex vulnerability CVE-2021-380

Reporter	Title	Published	Views	Family All 230
IBM Security Bulletins	Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 May 202218:37	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities in moment, ansi-regex, Node.js, and minimatch may affect IBM Spectrum Protect Client and IBM Spectrum Protect for Space Management (CVE-2022-31129, CVE-2022-24785, CVE-2021-3807, CVE-2022-29244, CVE-2022-3517)	17 Mar 202309:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus is vulnerable to denial of service due to ansi-regex module (CVE-2021-3807)	4 Jul 202216:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, OpenSSL, trim, and Chalk ansi-regex module might affect IBM Storage Defender – Data Protect	31 Oct 202316:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	30 Mar 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	15 Jul 202516:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	20 Apr 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	18 Oct 202213:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	31 May 202214:57	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:01	–	ibm

NVD

Node

ansi-regex_project ansi-regexRange4.0.0–4.1.1node.js

ansi-regex_project ansi-regexMatch3.0.0node.js

ansi-regex_project ansi-regexMatch5.0.0node.js

ansi-regex_project ansi-regexMatch6.0.0node.js

Node

oracle communications_cloud_native_core_policyMatch1.15.0

[
  {
    "vendor": "chalk",
    "product": "chalk/ansi-regex",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "6.0.1",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThan": "5.0.1",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "5.0.1",
        "status": "unaffected"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994
security	www.security.netapp.com/advisory/ntap-20221014-0002/
github	www.github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
oracle	www.oracle.com/security-alerts/cpuapr2022.html

21 Nov 2024 06:22Current

8.7High risk

Vulners AI Score8.7

CVSS 3.17.5

CVSS 27.8

CVSS 37.5

EPSS0.00215

CWE-1333