CVE-2020-36661

🗓️ 12 Feb 2023 21:10:15Reported by [email protected]Type

Vulnerability in Kong lua-multipart 0.5.8-1, inefficient regular expression complexity, upgrade to version 0.5.9-1 recommended.

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2020-36661 Kong lua-multipart multipart.lua is_header redos	12 Feb 202320:31	–	cvelist
CVE	CVE-2020-36661	12 Feb 202321:15	–	cve
Prion	Information disclosure	12 Feb 202321:15	–	prion
OSV	CVE-2020-36661	12 Feb 202321:15	–	osv

Nvd

Node

konghq multipartMatch0.5.8-1lua

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/Kong/lua-multipart/pull/34
vuldb	www.vuldb.com/
github	www.github.com/Kong/lua-multipart/releases/tag/0.5.9-1
github	www.github.com/Kong/lua-multipart/commit/d632e5df43a2928fd537784a99a79dec288bf01b

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Feb 2023 21:15Current

5Medium risk

Vulners AI Score5

CVSS22.7

CVSS37.5

EPSS0.00189

CWE-1333