Lucene search
Veracode Vulnerability DatabaseVERACODE:27869HistoryNov 12, 2020 - 2:06 a.m.
Regular Expression Denial Of Service (ReDoS)
2020-11-1202:06:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
express-validators
vulnerability
redos
regex
url validation
insecure usage
software
EPSS
0.001
Percentile
42.0%
express-validators is vulnerable to Regular Expression Denial of Service (ReDoS). An attacker is able to crash the application via a malicious URL due to the insecure usage of regex to validate URLs.
Related
osv
osv
Regular expression deinal of service in express-validators
2021-05-10 19:16:27
cve
cve
CVE-2020-7767
2020-11-11 11:15:10
cvelist
cvelist
CVE-2020-7767 Regular Expression Denial of Service (ReDoS)
2020-11-11 10:20:21
github
github
Regular expression deinal of service in express-validators
2021-05-10 19:16:27
nvd
nvd
CVE-2020-7767
2020-11-11 11:15:10
prion
prion
Design/Logic Flaw
2020-11-11 11:15:00