1 matches found
pcre: inefficient posix character class syntax check (8.38/16)
The pcrecompile function in pcrecompile.c in PCRE before 8.38 mishandles certain : nesting, which allows remote attackers to cause a denial of service CPU consumption or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object...
9.8CVSS7.4AI score0.06404EPSS
SaveExploits0References4
20