CVE-2021-33580

User controlled request.getHeader"Referer", request.getRequestURL and request.getQueryString are used to build and run a regex expression. The attacker doesn't have to use a browser and may send a specially crafted Referer header programmatically. Since the attacker controls the string and the...

PT-2021-20214

Name of the Vulnerable Software and Affected Versions Roller versions prior to 6.0.2 Description The issue arises from user-controlled inputs request.getHeader"Referer", request.getRequestURL, and request.getQueryString being used to build and execute a regex expression. An attacker can send a...