Lucene search
+L

1 matches found

OSV
OSV
added 2020/02/20 11:26 p.m.22 views

GHSA-CMCX-XHR8-3W9P Denial of Service in uap-core when processing crafted User-Agent strings

Impact Some regexes are vulnerable to regular expression denial of service REDoS due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTPS request to maliciously crafted long strings. Patches Please update uap-core to gt;=...

5.7CVSS7.3AI score0.02261EPSS
SaveExploits1References5
Rows per page
Query Builder