Lucene search
K

6 matches found

Veracode
Veracode
added 2023/01/23 5:35 a.m.16 views

Regular Expression Denial Of Service (ReDoS)

sisimai is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in the toplain function in string.rb due to inefficient regular expression complexity which leads to an application crash...

7.5CVSS7.2AI score0.00322EPSS
Exploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2023/01/17 9:30 p.m.22 views

Sisimai Inefficient Regular Expression Complexity vulnerability

A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the function toplain of the file lib/sisimai/string.rb. The manipulation leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be...

7.5CVSS7.4AI score0.00322EPSS
Exploits1References9Affected Software1
OSV
OSV
added 2023/01/17 9:30 p.m.24 views

GHSA-VM74-J4WQ-82XJ Sisimai Inefficient Regular Expression Complexity vulnerability

A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the function toplain of the file lib/sisimai/string.rb. The manipulation leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be...

4.3CVSS7.5AI score0.00322EPSS
Exploits1References9
NVD
NVD
added 2023/01/17 8:15 p.m.8 views

CVE-2022-4891

A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the function toplain of the file lib/sisimai/string.rb. The manipulation leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be...

7.5CVSS5AI score0.00322EPSS
Exploits1References6
Prion
Prion
added 2023/01/17 8:15 p.m.14 views

Design/Logic Flaw

A vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the function toplain of the file lib/sisimai/string.rb. The manipulation leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be...

5CVSS7.6AI score0.00322EPSS
Exploits1References6Affected Software1
CVE
CVE
added 2023/01/17 7:58 p.m.56 views

CVE-2022-4891

CVE-2022-4891 affects the Ruby library Sisimai up to version 4.25.14p11, impacting the function to_plain in lib/sisimai/string.rb. The issue is inefficient regular expression complexity (redos) that could be exploited once disclosed. A patch is available: upgrade to 4.25.14p12; patch identifier i...

7.5CVSS5.6AI score0.00322EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder