Lucene search
SnykCVELIST:CVE-2021-23490HistoryDec 24, 2021 - 8:05 p.m.
CVE-2021-23490 Regular Expression Denial of Service (ReDoS)
2021-12-2420:05:16
snyk
www.cve.org
3
vulnerability
regular expression
denial of service
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
58.8%
The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function.
CNA Affected
[
{
"product": "parse-link-header",
"vendor": "n/a",
"versions": [
{
"lessThan": "2.0.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
github
github
Uncontrolled Resource Consumption in parse-link-header
2022-01-06 21:37:02
nvd
nvd
CVE-2021-23490
2021-12-24 20:15:08
osv
osv
Uncontrolled Resource Consumption in parse-link-header
2022-01-06 21:37:02
CVE-2021-23490
2021-12-24 20:15:08
prion
prion
Design/Logic Flaw
2021-12-24 20:15:00
cve
cve
CVE-2021-23490
2021-12-24 20:15:08
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2021-12-27 10:22:04
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.002
Percentile
58.8%
Related for CVELIST:CVE-2021-23490