JVN#70502982: SYNCK GRAPHICA Mailform Pro CGI vulnerable to Regular expression Denial-of-Service (ReDoS)

Mailform Pro CGI provided by SYNCK GRAPHICA contains a Regular expression Denial-of-Service (ReDoS) vulnerability (CWE-1333).

Impact

A remote attacker may be able to cause a denial-of-service (DoS).

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

Products Affected

• Mailform Pro CGI 4.3.1.2 and earlier
  According to the developer, Mailform Pro CGI is affected when prefcode/prefcode.js Add-on is enabled.