Lucene search
GoogleOSV:CVE-2024-41818HistoryJul 29, 2024 - 4:15 p.m.
CVE-2024-41818
2024-07-2916:15:05
Google
osv.dev
14
fast-xml-parser
javascript
xml
parser
redos
vulnerability
fixed
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
21.9%
fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.
Related
nvd
nvd
CVE-2024-41818
2024-07-29 16:15:05
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2024-07-30 09:55:57
cve
cve
CVE-2024-41818
2024-07-29 16:15:05
cvelist
cvelist
CVE-2024-41818
2024-07-29 15:56:38
osv
osv
fast-xml-parser vulnerable to ReDOS at currency parsing
2024-07-29 17:46:16
CGA-cr5v-98hj-38hr
2024-08-01 14:04:52
CGA-69jr-f6mf-38rf
2024-08-13 14:04:52
wolfi
wolfi
CVE-2024-41818 vulnerabilities
2024-09-21 15:27:10
ibm
ibm
redhatcve
redhatcve
CVE-2024-41818
2024-07-31 08:19:34
vulnrichment
vulnrichment
CVE-2024-41818
2024-07-29 15:56:38
github
github
fast-xml-parser vulnerable to ReDOS at currency parsing
2024-07-29 17:46:16
redhat
redhat
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
21.9%
Related for OSV:CVE-2024-41818