Lucene search
K

109 matches found

OSV
OSV
added 2021/09/20 8:18 p.m.10 views

GHSA-49X3-8228-3W3M Inefficient Regular Expression Complexity in code-server

code-server is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.4AI score0.00248EPSS
Exploits1References4
Veracode
Veracode
added 2021/09/20 6:12 a.m.10 views

Regular Expression Denial Of Service (ReDoS)

code-server is vulnerable to regular expression denial of service. An attacker is able to send a malicious string which require extensive processing of regex machine, leading to an application crash...

7.5CVSS4AI score0.00248EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2021/09/17 7:15 a.m.8 views

CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity...

7.8CVSS0.00248EPSS
Exploits1References2
OSV
OSV
added 2021/09/17 7:15 a.m.7 views

CVE-2021-3810

code-server is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS6.7AI score
Exploits0References2
Cvelist
Cvelist
added 2021/09/17 6:15 a.m.13 views

CVE-2021-3810 Inefficient Regular Expression Complexity in cdr/code-server

code-server is vulnerable to Inefficient Regular Expression Complexity...

7.5CVSS7.7AI score0.00248EPSS
Exploits1References2
CVE
CVE
added 2021/09/17 6:15 a.m.42 views

CVE-2021-3810

CVE-2021-3810: code-server is vulnerable to Inefficient Regular Expression Complexity. The CVE has a high base impact (CVSS v3.1: 7.5, NETWORK, LOW attack complexity, no user interaction) in the NVD/NVDC entries; other mirrors (OSV, Red Hat, GHSA) corroborate the same issue. The connected records...

7.8CVSS7.4AI score0.00248EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/09/17 12:0 a.m.1 views

PT-2021-21950 · Unknown · Code-Server

Name of the Vulnerable Software and Affected Versions: code-server affected versions not specified Description: The issue is related to Inefficient Regular Expression Complexity. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

7.8CVSS7.3AI score0.00248EPSS
Exploits1References10
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.1 views

Coder code-server 安全漏洞

Coder Code-Server is a U.S. Coder company based on Microsoft's open source Visual Studio Code development products. It is used to build a convenient and unified development environment for developers. A security vulnerability exists in code-server that stems from vulnerability to inefficient...

7.8CVSS7.3AI score0.00248EPSS
Exploits1References3
Huntr
Huntr
added 2021/09/11 1:9 p.m.11 views

Inefficient Regular Expression Complexity in cdr/code-server

✍️ Description The code-server package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide crafted input to the ansiRegex functionality may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex. The ReDOS i...

7.8CVSS0.6AI score0.00248EPSS
Exploits1
Rows per page
Query Builder