1 matches found
Regular expression denial of service in Apache ShenYu
In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matchesconditionData.getParamValue, realData to make judgments, where both parameters are controllable by the user. This can cause an attacker pass in malicious regular expressions and characters causing a resource...
7.5CVSS7AI score0.0256EPSS
SaveExploits0References4Affected Software2
20