2 matches found
Code injection
GraphHopper is an open-source Java routing engine. In GrassHopper from version 2.0 and before version 2.4, there is a regular expression injection vulnerability that may lead to Denial of Service. This has been patched in 2.4 and 3.0 See this pull request for the fix:...
4CVSS6.5AI score0.01404EPSS
SaveExploits0References3Affected Software1
CVE-2021-29506 Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
GraphHopper is an open-source Java routing engine. In GrassHopper from version 2.0 and before version 2.4, there is a regular expression injection vulnerability that may lead to Denial of Service. This has been patched in 2.4 and 3.0 See this pull request for the fix:...
6.5CVSS6.7AI score0.01404EPSS
SaveExploits0References3
20