Lucene search
Veracode Vulnerability DatabaseVERACODE:29228HistoryFeb 03, 2021 - 5:36 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-02-0305:36:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.003 Low
EPSS
Percentile
71.3%
uap-core is vulnerable to regular expression denial of service. The vulnerability exists in regexes.yaml as a malicious user can set the User-Agent header in an HTTP(S) request with a long digit string to overload a server.
Related
osv
osv
CVE-2021-21317
2021-02-16 18:15:12
Denial of Service in uap-core
2021-02-02 15:46:38
prion
prion
Design/Logic Flaw
2021-02-16 18:15:00
nvd
nvd
CVE-2021-21317
2021-02-16 18:15:12
cve
cve
CVE-2021-21317
2021-02-16 18:15:12
ubuntucve
ubuntucve
CVE-2021-21317
2021-02-16 00:00:00
nodejs
nodejs
Denial of Service
2021-02-23 02:11:16
cvelist
cvelist
CVE-2021-21317 Denial of Service in uap-core
2021-02-16 17:45:16
github
github
Denial of Service in uap-core
2021-02-02 15:46:38