Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/05/18 12:0 a.m.36 views

Regular expression denial of service in Apache ShenYu

In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matchesconditionData.getParamValue, realData to make judgments, where both parameters are controllable by the user. This can cause an attacker pass in malicious regular expressions and characters causing a resource...

7.5CVSS7AI score0.0256EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder