Lucene search
+L

5 matches found

osv_ghsa
osv_ghsa
•added 2021/06/10 5:25 p.m.•44 views

GHSA-39Q4-P535-C852 Uncontrolled Resource Consumption in locutus

The package locutus before 2.0.15 is vulnerable to Regular Expression Denial of Service ReDoS via the gopherparsedir function...

7.5CVSS5.9AI score0.01936EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2021/06/08 7:42 a.m.•10 views

CVE-2021-23392

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service ReDoS via the gopherparsedir function...

7.5CVSS5.3AI score0.01936EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/06/08 12:00 a.m.•23 views

Locutus security vulnerability

Locutus PHP is an open source PHP language standard library used in JavaScript. A security vulnerability exists in locutus versions prior to 2.0.15, which stems from the gopherparsedir function being susceptible to a denial of service ReDoS attack...

7.5CVSS7.2AI score0.01936EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•7 views

PT-2021-15486

Name of the Vulnerable Software and Affected Versions locutus versions prior to 2.0.15 Description The issue concerns a Regular Expression Denial of Service ReDoS vulnerability via the gopher parsedir function. This can lead to a denial of service. Recommendations For versions prior to 2.0.15,...

7.5CVSS0.01936EPSS
SaveExploits1References7
Snyk
Snyk
•added 2021/04/05 12:11 p.m.•17 views

Regular Expression Denial of Service (ReDoS)

Overview locutus is a Locutus other languages' stadard libraries to JavaScript for fun and educational purposes Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the gopherparsedir function. PoC by Yeting Li var gopherparsedir =...

7.5CVSS6.7AI score0.01936EPSS
SaveExploits1References2
Rows per page
Query Builder