Lucene search
+L

1 matches found

Huntr
Huntr
added 2021/09/21 2:44 p.m.9 views

Inefficient Regular Expression Complexity in tapjs/tap-mocha-reporter

Description I would like to report a Regular Expression Denial of Service ReDoS vulnerability in tap-mocha-reporter. The ReDoS vulnerability is mainly due to the regex /^\s+|\s+$|/g and can be exploited with the following code. Proof of Concept // PoC.js var tapMochaReporter =...

1.7AI score
SaveExploits0
Rows per page
Query Builder