Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22663
HistoryMar 11, 2020 - 1:28 a.m.

Regular Expression Denial Of Service (ReDoS)

2020-03-1101:28:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.003

Percentile

69.0%

user_agent_parser is vulnerable to regular expression denial of service (ReDoS). The vulnerability exists through the vendored module, uap-core, where a long digit string can cause ReDoS. This vulnerability is related to CVE-2020-5243.